| name | Update Gosec Action Version |
| description | Update the gosec GHCR image version in action.yml using a provided gosec version. |
Update gosec version in GitHub Action metadata
Use this skill when you want to update the gosec version used by this repository's GitHub Action.
Required input
gosec version
<gosec version, for example 2.24.1>
Execution workflow
- Read
action.yml.
- Locate
runs.image with format docker://ghcr.io/securego/gosec:<version>.
- Replace only the version segment after the colon with the provided gosec version.
- Do not change unrelated fields or formatting in
action.yml.
- Validate that the resulting image value is exactly
docker://ghcr.io/securego/gosec:<provided_version>.
- Create a branch named
chore/update-action-gosec-<provided_version>.
- Commit the change with message
chore(action): bump gosec to <provided_version>.
- Push the branch to origin.
- Open a pull request to
master with:
- Title:
chore(action): bump gosec to <provided_version>
- Body: concise summary that this updates
action.yml GHCR image version.
Output requirements
- Report old version and new version.
- Confirm that only
action.yml was modified for the version bump.
- Report the created branch name, commit SHA, pull request title, and pull request URL.