diff --git a/.github/workflows/govuln.yaml b/.github/workflows/govuln.yaml new file mode 100644 index 00000000000..5f6a2e2b070 --- /dev/null +++ b/.github/workflows/govuln.yaml @@ -0,0 +1,26 @@ +name: Go Vulnerability Checker +on: [push, pull_request] +jobs: + test: + runs-on: ubuntu-latest + strategy: + fail-fast: false + matrix: + target: + - linux-amd64-govuln-check + steps: + - uses: actions/checkout@v2 + - uses: actions/setup-go@v2 + with: + go-version: "1.19.2" + - run: date + - env: + TARGET: ${{ matrix.target }} + run: | + echo "${TARGET}" + case "${TARGET}" in + linux-amd64-govuln-check) + go install golang.org/x/vuln/cmd/govulncheck@latest + govulncheck ./... + ;; + esac