diff --git a/.github/workflows/vulncheck.yml b/.github/workflows/vulncheck.yml new file mode 100644 index 000000000..9b88498b9 --- /dev/null +++ b/.github/workflows/vulncheck.yml @@ -0,0 +1,35 @@ +name: Run govulncheck + +on: + push: + branches: + - develop + paths: + - "**" + - "!**.md" + pull_request: + paths: + - "**" + - "!**.md" + +jobs: + vulncheck-check: + runs-on: ubuntu-latest + env: + GO111MODULE: on + steps: + - name: Fetch Repository + uses: actions/checkout@v4 + + - name: Install Go + uses: actions/setup-go@v4 + with: + go-version: "stable" + check-latest: true + cache: false + + - name: Install Govulncheck + run: go install golang.org/x/vuln/cmd/govulncheck@latest + + - name: Run Govulncheck + run: govulncheck ./...