build: add gosec linter checks to project ci pipeline

Signed-off-by: Niki Dokovski <nickytd@gmail.com>

.ci/pipeline_definitions

@@ -1,5 +1,15 @@
 oidc-apps-controller:
   base_definition:
+    repo:
+      source_labels:
+      - name: cloud.gardener.cnudie/dso/scanning-hints/source_analysis/v1
+        value:
+          policy: skip
+          comment: |
+            We use gosec for sast scanning, see attached log.
+    steps:
+      verify:
+        image: 'golang:1.23.2'
     traits:
       version:
         preprocess: "inject-commit-hash"
@@ -15,10 +25,6 @@ oidc-apps-controller:
             image: europe-docker.pkg.dev/gardener-project/snapshots/gardener/extensions/oidc-apps-controller
             dockerfile: "Dockerfile"
             resource_labels:
-              - name: "cloud.gardener.cnudie/responsibles"
-                value:
-                  - type: "githubUser"
-                    username: "nickytd"
               - name: "gardener.cloud/cve-categorisation"
                 value:
                   network_exposure: "protected"
@@ -53,6 +59,16 @@ oidc-apps-controller:
           nextversion: "bump_minor"
           next_version_callback: ".ci/prepare_release"
           release_callback: ".ci/prepare_release"
+          assets:
+          - type: build-step-log
+            step_name: verify
+            purposes:
+            - lint
+            - sast
+            - gosec
+            comment: |
+              We use gosec (linter) for SAST scans, see: https://github.com/securego/gosec.
+              Enabled by https://github.com/gardener/oidc-apps-controller/pull/77
         slack:
           default_channel: "internal_scp_workspace"
           channel_cfgs:

.ci/verify

@@ -9,9 +9,4 @@ cd "$(dirname $0)/.."
 git config --global user.email "gardener@sap.com"
 git config --global user.name "Gardener CI/CD"
 
-# Required due to https://github.com/kubernetes/kubernetes/issues/86753 - can be removed once the issue is fixed.
-mkdir -p /go/src/github.com/gardener/oidc-apps-controller
-cp -r . /go/src/github.com/gardener/oidc-apps-controller
-cd /go/src/github.com/gardener/oidc-apps-controller
-
 make verify

Makefile

@@ -61,6 +61,8 @@ check: format $(GO_LINT)
 format:
 	@gofmt -l -w $(REPO_ROOT)/cmd $(REPO_ROOT)/pkg $(REPO_ROOT)/test
 
+verify: check test sast
+
 generate-controller-registration:
 	@go generate $(REPO_ROOT)/charts/...