Skip to content

govulncheck

govulncheck #3

Workflow file for this run

name: govulncheck
on:
pull_request:
types: [opened, synchronize, reopened, labeled, unlabeled]
schedule:
- cron: '0 0 * * *'
jobs:
govulncheck:
name: govulncheck
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Setup Go
uses: actions/setup-go@v5
with:
go-version-file: go.mod
env:
GOPRIVATE: github.com/cofide
- name: Use GitHub deploy key
env:
SSH_AUTH_SOCK: /tmp/ssh_agent.sock
run: |
mkdir -p ~/.ssh
ssh-keyscan github.com >> ~/.ssh/known_hosts
ssh-agent -a $SSH_AUTH_SOCK > /dev/null
ssh-add - <<< "${{ secrets.COFIDE_API_SDK_PRIVATE_KEY }}"
echo "SSH_AUTH_SOCK=$SSH_AUTH_SOCK" >> $GITHUB_ENV
- name: Setup access to private Go modules (cofide-api-sdk)
run: |
git config --global url."ssh://[email protected]/".insteadOf https://github.com/
- name: Install dependencies
run: |
go mod download
- id: govulncheck
uses: golang/govulncheck-action@v1
with:
go-package: ./...
repo-checkout: false
go-version-file: go.mod
go-version-input: ""