-
Notifications
You must be signed in to change notification settings - Fork 114
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Added govulncheck workflow #405
Conversation
Signed-off-by: Tanner Jones <[email protected]>
Signed-off-by: Tanner Jones <[email protected]>
Any thoughts @dblock? |
What does this do? :) |
|
But we already have dependabot and friends, no? Anyway I don't have anything against merging this PR! @Jakob3xD WDYT? |
Dependabot only looks at dependency versions govulncheck will look at code that's imported and used to determine if a vulnerability is reachable / affects the code. |
* Added govulncheck workflow Signed-off-by: Tanner Jones <[email protected]> * Added govulncheck to CHANGELOG.md Signed-off-by: Tanner Jones <[email protected]> --------- Signed-off-by: Tanner Jones <[email protected]> (cherry picked from commit 8ab15f1)
* Added govulncheck workflow Signed-off-by: Tanner Jones <[email protected]> * Added govulncheck to CHANGELOG.md Signed-off-by: Tanner Jones <[email protected]> --------- Signed-off-by: Tanner Jones <[email protected]> (cherry picked from commit 8ab15f1) Co-authored-by: Tanner Jones <[email protected]>
Signed-off-by: Tanner Jones [email protected]