.github: add govuln check

- add job for govuln job - allow to continue on failure, until all issues are addressed - address: #14449 Signed-off-by: vivekpatani <[email protected]>
etcd-io · Oct 27, 2022 · 5c0d653 · 5c0d653
1 parent 9bc4a63
commit 5c0d653
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/.github/workflows/govuln.yaml b/.github/workflows/govuln.yaml
@@ -0,0 +1,26 @@
+name: Go Vulnerability Checker
+on: [push, pull_request]
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - linux-amd64-govuln-check
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-go@v2
+        with:
+          go-version: "1.19.2"
+      - run: date
+      - env:
+          TARGET: ${{ matrix.target }}
+        run: |
+          echo "${TARGET}"
+          case "${TARGET}" in
+            linux-amd64-govuln-check)
+              go install golang.org/x/vuln/cmd/govulncheck@latest
+              govulncheck ./...
+              ;;
+          esac