dev: add: pos-976 move govuln to security-ci

maticnetwork · Nov 15, 2022 · c748be2 · c748be2
1 parent 1a0b910
commit c748be2
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/security-ci.yml b/.github/workflows/security-ci.yml
@@ -39,3 +39,16 @@ jobs:
         uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: snyk.sarif
+
+  govuln-check:
+    name: Golang vulnerabilities check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Running govulncheck
+        uses: Templum/govulncheck-action@v0.0.6
+        with:
+          go-version: 1.18
+          vulncheck-version: latest
+          package: ./...
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          fail-on-vuln: true