feat: add security check workflow [CE-220]

[DimaSalakhov]

CE-220

Adds github workflow that:

• scans both js and go code quality
• scans go code for security issues
• scans go dependencies for known vulnerabilities

[pull-dog]

*Ruff* 🐶 It looks like you are currently using the maximum amount of concurrent test environments 😫

You can upgrade your plan to increase that limit, and our plans are quite cheap.

The following pull requests are using environments from your pool as of writing this comment:

• knittl/portainer: PR #4413
• knittl/portainer: PR #4731

You can also see a live list of all test environments if you wish.

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.pull-dog.yml"
  ],
  "buildArguments": {
    "PORTAINER_TAG": "pr4790-linux-amd64"
  },
  "label": "test-instance-available",
  "expiry": "1.00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
0HM6JTGCOT2NP:00000002

[DimaSalakhov]

ref securego/gosec#565
should likely fix the gosec scanning issue

[deviantony]

@pull-dog down