Added govulncheck workflow (#405)

* Added govulncheck workflow Signed-off-by: Tanner Jones <[email protected]> * Added govulncheck to CHANGELOG.md Signed-off-by: Tanner Jones <[email protected]> --------- Signed-off-by: Tanner Jones <[email protected]>
opensearch-project · Oct 30, 2023 · 8ab15f1 · 8ab15f1
1 parent 812553e
commit 8ab15f1
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
@@ -0,0 +1,14 @@
+name: Run govulncheck
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v3
+
+    - name: Run govulncheck
+      uses: golang/govulncheck-action@v1
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -17,6 +17,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 - Adds `Err()` function to Response for detailed errors ([#246](https://github.com/opensearch-project/opensearch-go/pull/246))
 - Adds golangci-lint as code analysis tool ([#313](https://github.com/opensearch-project/opensearch-go/pull/313))
+- Adds govulncheck to check for go vulnerablities ([#405](https://github.com/opensearch-project/opensearch-go/pull/405))
 
 ### Changed