diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 00000000..474e8651 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1 @@ +* @0xPolygon/core-cdk diff --git a/.github/workflows/security-build.yml b/.github/workflows/security-build.yml new file mode 100644 index 00000000..138e33a3 --- /dev/null +++ b/.github/workflows/security-build.yml @@ -0,0 +1,22 @@ +name: Security Build +on: + push: + workflow_dispatch: {} + +jobs: + govuln: + name: Run govuln check and Publish + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - name: Running govulncheck + uses: Templum/govulncheck-action@v0.0.8 + continue-on-error: true + env: + DEBUG: "true" + with: + go-version: 1.21.x + vulncheck-version: latest + package: ./... + github-token: ${{ secrets.GITHUB_TOKEN }} + fail-on-vuln: true