Implement manual govulncheck (#12135)

Signed-off-by: Derek Nola <derek.nola@suse.com>
pull/12153/head
Derek Nola 2025-04-16 09:15:37 -07:00 committed by GitHub
parent 7a6e907ffe
commit e392278fab
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 13 additions and 9 deletions

View File

@ -5,6 +5,7 @@ on:
- go.sum
schedule:
- cron: "0 0 * * *"
workflow_dispatch: {}
permissions: read-all
@ -13,12 +14,15 @@ jobs:
name: govulncheck
runs-on: ubuntu-latest
steps:
- name: Setup Go
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # pin@5.4.0
with:
go-version: '1.23'
check-latest: true
- name: govulncheck
uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # pin@1.0.4
with:
go-package: ./...
- name: Checkout
uses: actions/checkout@v4
- name: Install Go
uses: ./.github/actions/setup-go
- name: Go Generate
run: |
./scripts/download
./scripts/generate
- name: Install govulncheck
run: go install golang.org/x/vuln/cmd/govulncheck@latest
- name: Run govulncheck
run: govulncheck -format=text ./...