Merge pull request #38 from JenswBE/run-govulncheck-inside-build

Run govulncheck inside build
JenswBE · Oct 11, 2022 · c50e085 · c50e085
2 parents 3b0e509 + 6767ed4
commit c50e085
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 5 deletions.
diff --git a/.github/workflows/test-build-publish.yml b/.github/workflows/test-build-publish.yml
@@ -44,11 +44,6 @@ jobs:
           go install github.com/nishanths/exhaustive/...@latest
           exhaustive ./...
 
-      - name: Run govulncheck
-        run: |
-          go install golang.org/x/vuln/cmd/govulncheck@latest
-          govulncheck ./...
-
       - name: Start E2E services
         working-directory: e2e
         run: |

diff --git a/Dockerfile b/Dockerfile
@@ -3,6 +3,8 @@ FROM docker.io/library/golang:1.18 AS builder
 
 WORKDIR /src/
 COPY . .
+RUN go install golang.org/x/vuln/cmd/govulncheck@latest
+RUN govulncheck ./...
 RUN CGO_ENABLED=0 go build -ldflags='-extldflags=-static' -o /bin/delic ./cmd
 
 FROM docker.io/library/alpine:latest