ci: run govulncheck to find vulnerable dependencies

Signed-off-by: Robin Hahling <[email protected]>
cilium · Aug 2, 2023 · 80530df · 80530df
1 parent e1c24b9
commit 80530df
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -31,6 +31,11 @@ jobs:
           # see https://github.com/golangci/golangci-lint-action/issues/119#issuecomment-981090648 for output
           args: --config=.golangci.yml --verbose --out-${NO_FUTURE}format colored-line-number
           skip-cache: true
+      - name: govulncheck
+        uses: golang/govulncheck-action@dd3ead030e4f2cf713062f7a3395191802364e13
+        with:
+          go-version: '1.20.7'
+          go-package: './...'
       - name: Build
         run: |
           go build ./...