fix: resolve CI workflow failures

- Replace broken securecodewarrior gosec action with direct installation
- Add fallback buildifier installation in CI workflow
- Add conditional checks for missing rust directory
- Add .gitignore to prevent future node_modules commits

Author: avrabe

.github/workflows/ci.yml

@@ -333,8 +333,14 @@ jobs:
 
     - name: Buildifier Check
       run: |
-        # Use bazel to run buildifier (it's already a dependency)
-        bazel run //:buildifier -- --lint=warn --mode=check $(find . -name "*.bzl" -o -name "BUILD" -o -name "BUILD.bazel")
+        # Install buildifier if Bazel target is not available
+        if ! bazel query //:buildifier &>/dev/null; then
+          go install github.com/bazelbuild/buildtools/buildifier@latest
+          buildifier --lint=warn --mode=check $(find . -name "*.bzl" -o -name "BUILD" -o -name "BUILD.bazel")
+        else
+          # Use bazel to run buildifier (it's already a dependency)
+          bazel run //:buildifier -- --lint=warn --mode=check $(find . -name "*.bzl" -o -name "BUILD" -o -name "BUILD.bazel")
+        fi
 
     - name: License Check
       run: |

.github/workflows/performance.yml

@@ -81,9 +81,11 @@ jobs:
         bazel build //tinygo:file_ops_component_wasm
 
         # Build Rust component (if exists)
-        if bazel query //rust:file_ops_rust &>/dev/null; then
+        if [ -d "rust" ] && bazel query //rust:file_ops_rust &>/dev/null; then
           bazel build //rust:file_ops_rust
           bazel build //rust:file_ops_component_wasm
+        else
+          echo "Rust components not available - skipping Rust builds"
         fi
 
     - name: Create Performance Test Data
@@ -135,7 +137,7 @@ jobs:
             'wasmtime run --dir=. bazel-bin/tinygo/file_ops_component_wasm.wasm -- copy_file --src perf_test_data/small.txt --dest perf_test_data/wasm_copy.txt'
         fi
 
-    - name: Benchmark Rust Implementation
+    - name: Benchmark Rust Implementation  
       if: (github.event.inputs.benchmark_type == 'all' || github.event.inputs.benchmark_type == 'rust-only' || github.event.inputs.benchmark_type == '') && hashFiles('rust/**') != ''
       run: |
         echo "## Rust Performance Benchmarks" >> perf_results.md

.github/workflows/security.yml

@@ -34,9 +34,12 @@ jobs:
         toolchain: "1.82.0"
 
     - name: Run Gosec Security Scanner (Go)
-      uses: securecodewarrior/github-action-gosec@master
-      with:
-        args: '-fmt sarif -out go-results.sarif ./tinygo/...'
+      run: |
+        # Install gosec
+        go install github.com/securecodewarrior/gosec/v2/cmd/gosec@latest
+        
+        # Run gosec security scan
+        cd tinygo && gosec -fmt sarif -out ../go-results.sarif ./...
       continue-on-error: true
 
     - name: Upload Gosec Results to GitHub Security Tab
@@ -48,9 +51,11 @@ jobs:
 
     - name: Run Cargo Audit (Rust)
       run: |
-        if [ -f "rust/Cargo.toml" ]; then
+        if [ -d "rust" ] && [ -f "rust/Cargo.toml" ]; then
           cargo install cargo-audit
           cd rust && cargo audit --format json --output audit-results.json || true
+        else
+          echo "Rust directory not found - skipping Cargo audit"
         fi
 
     - name: Run Trivy Vulnerability Scanner
@@ -108,7 +113,7 @@ jobs:
 
     - name: Rust Dependency Check
       run: |
-        if [ -f "rust/Cargo.toml" ]; then
+        if [ -d "rust" ] && [ -f "rust/Cargo.toml" ]; then
           cargo install cargo-audit cargo-deny
           cd rust
 
@@ -117,6 +122,8 @@ jobs:
 
           # Check licenses and dependency policies
           cargo deny check
+        else
+          echo "Rust directory not found - skipping Rust dependency checks"
         fi
       continue-on-error: true
 
@@ -175,7 +182,7 @@ jobs:
 
     - name: Update Rust Dependencies
       run: |
-        if [ -f "rust/Cargo.toml" ]; then
+        if [ -d "rust" ] && [ -f "rust/Cargo.toml" ]; then
           cd rust
 
           # Update Cargo.toml with latest compatible versions
@@ -187,6 +194,8 @@ jobs:
           else
             echo "RUST_DEPS_UPDATED=true" >> $GITHUB_ENV
           fi
+        else
+          echo "Rust directory not found - skipping Rust dependency updates"
         fi
 
     - name: Update Bazel Dependencies

.gitignore

@@ -0,0 +1,24 @@
+# Dependencies
+node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Build outputs
+dist/
+build/
+*.log
+
+# OS files
+.DS_Store
+Thumbs.db
+
+# IDE files
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Bazel
+bazel-*