ci: run govulncheck to find vulnerable dependencies

Signed-off-by: Robin Hahling <[email protected]>
cilium · Aug 2, 2023 · 2c331da · 2c331da
1 parent 76c9870
commit 2c331da
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -31,6 +31,10 @@ jobs:
           # see https://github.com/golangci/golangci-lint-action/issues/119#issuecomment-981090648 for output
           args: --config=.golangci.yml --verbose --out-${NO_FUTURE}format colored-line-number
           skip-cache: true
+      - name: Run govulncheck
+        run: |
+          go install golang.org/x/vuln/cmd/govulncheck@latest
+          govulncheck ./...
       - name: Build
         run: |
           go build ./...