mirror of
https://blitiri.com.ar/repos/chasquid
synced 2025-12-17 14:37:02 +00:00
6896b221e8
govulncheck will complain when run on older Go versions that are known to have security issues. Github setup-go action has a cache for the "latest" go version and sometimes the latest isn't really used. So sometimes, this generates false positives because govulncheck is run on an older Go version, which is not a problem in chasquid itself. To prevent those false positives, this patch asks the Github CI to always check for the latest Go version when running govulncheck.
26 lines
608 B
YAML
26 lines
608 B
YAML
name: "govulncheck"
|
|
|
|
on:
|
|
push:
|
|
branches: [ "master", "next" ]
|
|
pull_request:
|
|
# The branches below must be a subset of the branches above
|
|
branches: [ "master", "next" ]
|
|
schedule:
|
|
- cron: '29 21 * * 6'
|
|
|
|
jobs:
|
|
govulncheck:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 5
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: actions/setup-go@v3
|
|
with:
|
|
go-version: ">=1.19.2"
|
|
check-latest: true
|
|
- name: install govulncheck
|
|
run: go install golang.org/x/vuln/cmd/govulncheck@latest
|
|
- name: run govulncheck
|
|
run: govulncheck ./...
|