# Update Gosec Action Version > Update the gosec GHCR image version in action.yml using a provided gosec version. Use when this capability is needed. - Skill: `tomevault-io/update-gosec-action-version` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/update-gosec-action-version` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/update-gosec-action-version/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/update-gosec-action-version --- # Update gosec version in GitHub Action metadata Use this skill when you want to update the gosec version used by this repository's GitHub Action. ## Required input ### gosec version ## Execution workflow 1. Read `action.yml`. 2. Locate `runs.image` with format `docker://ghcr.io/securego/gosec:`. 3. Replace only the version segment after the colon with the provided gosec version. 4. Do not change unrelated fields or formatting in `action.yml`. 5. Validate that the resulting image value is exactly `docker://ghcr.io/securego/gosec:`. 6. Create a branch named `chore/update-action-gosec-`. 7. Commit the change with message `chore(action): bump gosec to `. 8. Push the branch to origin. 9. Open a pull request to `master` with: - Title: `chore(action): bump gosec to ` - Body: concise summary that this updates `action.yml` GHCR image version. ## Output requirements - Report old version and new version. - Confirm that only `action.yml` was modified for the version bump. - Report the created branch name, commit SHA, pull request title, and pull request URL. --- > Source: [securego/gosec](https://github.com/securego/gosec) — distributed by [TomeVault](https://tomevault.io).