From 985024d86ff34d20096bcd62a4282b98c3025f69 Mon Sep 17 00:00:00 2001 From: Chief Marlin <96321026+chiefMarlin@users.noreply.github.com> Date: Wed, 4 Sep 2024 15:25:42 -0400 Subject: [PATCH] Create vuln-check.yml --- .github/workflows/vuln-check.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/workflows/vuln-check.yml diff --git a/.github/workflows/vuln-check.yml b/.github/workflows/vuln-check.yml new file mode 100644 index 0000000..511f51d --- /dev/null +++ b/.github/workflows/vuln-check.yml @@ -0,0 +1,30 @@ +name: VulnCheck +on: + pull_request: + branches: + - main + + push: + branches: + - main + +permissions: + contents: read # to fetch code (actions/checkout) + +jobs: + vulncheck: + name: Analysis + runs-on: ubuntu-latest + steps: + - name: Check out code into the Go module directory + uses: actions/checkout@v4 + - name: Set up Go + uses: actions/setup-go@v5 + with: + go-version: 1.23 + - name: Get official govulncheck + run: go install golang.org/x/vuln/cmd/govulncheck@latest + shell: bash + - name: Run govulncheck + run: govulncheck -show verbose ./... + shell: bash