build: run govulncheck with go version from build image (#2931)

kanisterio · Jul 15, 2024 · e768225 · e768225
1 parent 80ef874
commit e768225
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml
@@ -15,11 +15,17 @@ jobs:
     steps:
       - name: 'Checkout Repository'
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      ## Go version from build image is used in the govulncheck step
+      - name: 'Get go version from build image'
+        id: go_version
+        run: |
+          version=$(docker run ghcr.io/kanisterio/build go version | { read _ _ v _; echo ${v#go}; })
+          echo "go_version=$version" >> "$GITHUB_OUTPUT"
       - id: govulncheck
         name: 'Govulncheck'
         uses: golang/govulncheck-action@dd0578b371c987f96d1185abb54344b44352bd58 # v1.0.3
         continue-on-error: ${{ github.event_name == 'pull_request' }}
         with:
           repo-checkout: false
           cache: false
-          go-version-file: go.mod
+          go-version-input: ${{ steps.go_version.outputs.go_version }}
diff --git a/go.mod b/go.mod
@@ -2,7 +2,7 @@ module github.com/kanisterio/kanister
 
 go 1.22
 
-toolchain go1.22.2
+toolchain go1.22.4
 
 replace (
 	github.com/googleapis/gnostic => github.com/googleapis/gnostic v0.4.1