Added gosec

Author: nicholasdille

renovate.json

@@ -2081,6 +2081,17 @@
         "version: \"?(?<currentValue>.*?)\"?\\n"
       ]
     },
+    {
+      "datasourceTemplate": "github-releases",
+      "depNameTemplate": "securego/gosec",
+      "extractVersionTemplate": "^v(?<version>.+?)$",
+      "fileMatch": [
+        "^tools/gosec/manifest.yaml$"
+      ],
+      "matchStrings": [
+        "version: \"?(?<currentValue>.*?)\"?\\n"
+      ]
+    },
     {
       "datasourceTemplate": "github-releases",
       "depNameTemplate": "tianon/gosu",

tools/gosec/Dockerfile.template

@@ -0,0 +1,12 @@
+#syntax=docker/dockerfile:1.5.2
+
+ARG ref=main
+
+FROM ghcr.io/nicholasdille/docker-setup/base:${ref} AS prepare
+ARG name
+ARG version
+RUN <<EOF
+curl --silent --location --fail "https://github.com/securego/gosec/releases/download/v${version}/gosec_${version}_linux_${alt_arch}.tar.gz" \
+| tar --extract --gzip --directory="${prefix}${target}/bin/" --no-same-owner \
+    gosec
+EOF

tools/gosec/manifest.yaml

@@ -0,0 +1,16 @@
+name: gosec
+version: "2.15.0"
+check: ""
+platforms:
+- linux/amd64
+- linux/arm64
+tags:
+- category/security
+- lang/go
+- type/cli
+homepage: https://github.com/securego/gosec
+description: Golang security checker
+renovate:
+  datasource: github-releases
+  package: securego/gosec
+  extractVersion: ^v(?<version>.+?)$