diff --git a/bucket/gosec.json b/bucket/gosec.json
new file mode 100644
index 0000000000..910fa32e7c
--- /dev/null
+++ b/bucket/gosec.json
@@ -0,0 +1,24 @@
+{
+    "version": "2.13.1",
+    "description": "Inspects source code for security problems by scanning the Go AST.",
+    "homepage": "https://github.com/securego/gosec",
+    "license": "Apache-2.0",
+    "architecture": {
+        "64bit": {
+            "url": "https://github.com/securego/gosec/releases/download/v2.13.1/gosec_2.13.1_windows_amd64.tar.gz",
+            "hash": "e55d44c241c7830a3881829cb1601781d270fc709f371e82ee3cf704587b33ec"
+        }
+    },
+    "bin": "gosec.exe",
+    "checkver": "github",
+    "autoupdate": {
+        "architecture": {
+            "64bit": {
+                "url": "https://github.com/securego/gosec/releases/download/v$version/gosec_$version_windows_amd64.tar.gz"
+            }
+        },
+        "hash": {
+            "url": "$baseurl/gosec_$version_checksums.txt"
+        }
+    }
+}