force use of gosec 1.2.0 because 1.3 does not work for some reason

coinbase · Apr 18, 2019 · cdf413e · cdf413e
1 parent 469e5b6
commit cdf413e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -83,6 +83,9 @@ RUN bundle exec bundle-audit update
 RUN go get github.com/svent/sift
 
 # Install gosec, static code vulnerability checker
+RUN go get -d github.com/securego/gosec/cmd/gosec/...
+# The commit hashes to gosec tag 1.2.0
+RUN cd $GOPATH/src/github.com/securego/gosec/ && git checkout 2695567487c0f23a8f152b9740571d9a0f08f243 && cd /home
 RUN go get github.com/securego/gosec/cmd/gosec/...
 
 # Make repo directory to copy go project into when running gosec