ci: add govulncheck (#456)

This is intended to catch low-hanging fruit.

Signed-off-by: Xe Iaso <me@xeiaso.net>
This commit is contained in:
Xe Iaso 2025-05-06 10:07:55 -04:00 committed by GitHub
parent 2e9b18a510
commit 16412a8bf9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 16 additions and 2 deletions

View file

@ -82,6 +82,11 @@ jobs:
- name: Test
run: npm run test
- uses: dominikh/staticcheck-action@fe1dd0c3658873b46f8c9bb3291096a617310ca6 # v1.3.1
- name: Lint with staticcheck
uses: dominikh/staticcheck-action@fe1dd0c3658873b46f8c9bb3291096a617310ca6 # v1.3.1
with:
version: "latest"
- name: Run govulncheck
id: govulncheck
uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4