

0 / 2 embers
0 / 3000 xp
click for more info
Complete a lesson to start your streak
click for more info
Still calibrating
click for more info
Not enough gems
Cost: 6 gems
1: Security Checks
incomplete
2: CI Security
incomplete
3: Fix Security Issues
incomplete
4: Security Review
incomplete
This lesson's interactive features are locked, please to keep using them
Another common use case for continuous integration is static security checks. These are checks that can be run on your code to find potential security vulnerabilities.
There are many products out there that do this sort of thing. One of the most popular open-source ones is Gosec.
go install github.com/securego/gosec/v2/cmd/gosec@latest
To run gosec on the entire Notely codebase, run this from the root of the project:
gosec ./...
You should see a few unhandled errors! That's okay. Don't fix them yet.
Run and submit the CLI tests from the root of your repo.