-
Notifications
You must be signed in to change notification settings - Fork 439
40 lines (38 loc) · 1006 Bytes
/
govulncheck.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
name: Nightly govulncheck
on:
workflow_call: # allows to reuse this workflow
inputs:
ref:
description: 'The branch to run the workflow on'
required: true
type: string
push:
branches:
- main
- release-v*
schedule:
- cron: '00 00 * * *'
workflow_dispatch:
permissions:
contents: read
jobs:
govulncheck-tests:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
with:
ref: ${{ inputs.ref || github.ref }}
- name: Checkout Go
uses: actions/setup-go@v3
with:
go-version: 'stable'
- name: Install govulncheck
run: |
go install golang.org/x/vuln/cmd/govulncheck@latest
- name: Run govulncheck
run: govulncheck ./ddtrace/... ./appsec/... ./profiler/... ./internal/...
- name: Run govulncheck-contribs
run: |
go list -f '{{.Dir}}' ./contrib/... | while read dir ; do
govulncheck -C $dir .
done