From 6896b221e89563c523e7a843095f174157ab8597 Mon Sep 17 00:00:00 2001 From: Alberto Bertogli Date: Sat, 12 Nov 2022 18:31:57 +0000 Subject: [PATCH] github: Use the latest Go version for govulncheck govulncheck will complain when run on older Go versions that are known to have security issues. Github setup-go action has a cache for the "latest" go version and sometimes the latest isn't really used. So sometimes, this generates false positives because govulncheck is run on an older Go version, which is not a problem in chasquid itself. To prevent those false positives, this patch asks the Github CI to always check for the latest Go version when running govulncheck. --- .github/workflows/govulncheck.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index 2455e16..ac5a3a3 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -18,6 +18,7 @@ jobs: - uses: actions/setup-go@v3 with: go-version: ">=1.19.2" + check-latest: true - name: install govulncheck run: go install golang.org/x/vuln/cmd/govulncheck@latest - name: run govulncheck