Add govulncheck to CI

go-spatial · Feb 23, 2024 · 517e323 · 517e323
1 parent b7ad33b
commit 517e323
Showing 1 changed file with 20 additions and 3 deletions.
diff --git a/.github/workflows/on_pr_push.yml b/.github/workflows/on_pr_push.yml
@@ -30,12 +30,12 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v4
         with:
-          go-version: 1.21.3
+          go-version-file: 'go-mod'
 
       - name: Env Debug
         run: |
@@ -110,3 +110,20 @@ jobs:
           pushd ${GITHUB_WORKSPACE}/server
           go generate ./...
           popd
+
+  govulncheck:
+    name: Run govulncheck
+    runs-on: ubuntu-22.04 
+    steps:
+    - name: Check out code
+      uses: actions/checkout@v4
+
+    - name: Set up Go
+      uses: actions/setup-go@v4
+      with:
+        go-version-file: 'go-mod'
+
+    - name: Install and run go vulncheck
+      run: |
+        go install golang.org/x/vuln/cmd/govulncheck@latest
+        govulncheck ./...