Skip to content

vuln

vuln #815

Workflow file for this run

name: vuln
on:
workflow_call:
push:
branches:
- "main"
- "develop"
pull_request:
branches:
- "main"
- "develop"
schedule:
- cron: '0 10 * * 1' # run "At 10:00 on Monday"
jobs:
run:
name: Vulnerability Check
runs-on: ubuntu-latest
timeout-minutes: 5
env:
GO111MODULE: on
steps:
- name: Install Go
uses: actions/setup-go@v4
with:
go-version: '1.22.4'
check-latest: true
- name: Checkout
uses: actions/checkout@v3
# TODO: enable in https://github.com/EinStack/glide/issues/169
# - name: Install govulncheck
# run: go install golang.org/x/vuln/cmd/govulncheck@latest
- name: Install gosec
run: go install github.com/securego/gosec/v2/cmd/gosec@latest
# TODO: enable in https://github.com/EinStack/glide/issues/169
# - name: Govulncheck
# run: govulncheck -test ./...
- name: Govulncheck
run: gosec ./...