From f176f53a15b6755e73345963adb2f7ec46d227a2 Mon Sep 17 00:00:00 2001
From: Jiun Lee <skyenought@qq.com>
Date: Mon, 6 Nov 2023 17:30:17 +0800
Subject: [PATCH] ci: add govulncheck (#982)

---
 .github/workflows/vulncheck.yml | 35 +++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 .github/workflows/vulncheck.yml

diff --git a/.github/workflows/vulncheck.yml b/.github/workflows/vulncheck.yml
new file mode 100644
index 000000000..9b88498b9
--- /dev/null
+++ b/.github/workflows/vulncheck.yml
@@ -0,0 +1,35 @@
+name: Run govulncheck
+
+on:
+  push:
+    branches:
+      - develop
+    paths:
+      - "**"
+      - "!**.md"
+  pull_request:
+    paths:
+      - "**"
+      - "!**.md"
+
+jobs:
+  vulncheck-check:
+    runs-on: ubuntu-latest
+    env:
+      GO111MODULE: on
+    steps:
+      - name: Fetch Repository
+        uses: actions/checkout@v4
+
+      - name: Install Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: "stable"
+          check-latest: true
+          cache: false
+
+      - name: Install Govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+
+      - name: Run Govulncheck
+        run: govulncheck ./...