diff --git a/.github/workflows/security-ci.yml b/.github/workflows/security-ci.yml index 4d18a683dd..71c8a94a65 100644 --- a/.github/workflows/security-ci.yml +++ b/.github/workflows/security-ci.yml @@ -39,3 +39,16 @@ jobs: uses: github/codeql-action/upload-sarif@v2 with: sarif_file: snyk.sarif + + govuln-check: + name: Golang vulnerabilities check + runs-on: ubuntu-latest + steps: + - name: Running govulncheck + uses: Templum/govulncheck-action@v0.0.6 + with: + go-version: 1.18 + vulncheck-version: latest + package: ./... + github-token: ${{ secrets.GITHUB_TOKEN }} + fail-on-vuln: true