feat: add osv-scanner

.gitea/workflows/security.yml

@@ -123,3 +123,33 @@ jobs:
             echo "No Semgrep scan results found"
             exit 1
           fi
+
+      # Need Go
+      - name: Install Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: 'stable' # Latest stable version
+
+      # Install OSV Scanner
+      - name: Install OSV Scanner
+        run: |
+          export PATH="$HOME/go/bin:$PATH"
+          go install github.com/google/osv-scanner/cmd/osv-scanner@latest
+
+      # Run OSV Scanner
+      - name: Run OSV Scanner
+        run: |
+          export PATH="$HOME/go/bin:$PATH"
+          osv-scanner -r scan --format table --output osv-results.txt .
+
+      # Display OSV Scanner results
+      - name: Display OSV Scanner scan results
+        if: always()
+        run: |
+          if [ -f osv-results.txt ]; then
+            echo "=== OSV Scanner Results ==="
+            cat osv-results.txt
+          else
+            echo "No OSV Scanner scan results found"
+            exit 1
+          fi