From 71831fa7b85c70d64f41671ff0f71f7063dd2fed Mon Sep 17 00:00:00 2001 From: mtpoly <128363128+mt-polygon-technology@users.noreply.github.com> Date: Thu, 29 Feb 2024 23:39:26 +0100 Subject: [PATCH] Create security-build.yml --- .github/workflows/security-build.yml | 37 ++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .github/workflows/security-build.yml diff --git a/.github/workflows/security-build.yml b/.github/workflows/security-build.yml new file mode 100644 index 0000000..f592eac --- /dev/null +++ b/.github/workflows/security-build.yml @@ -0,0 +1,37 @@ + +name: Security Build +on: + push: + workflow_dispatch: {} + + +jobs: + golangci: + name: lint + runs-on: ubuntu-latest + steps: + - uses: actions/setup-go@v3 + with: + go-version: 1.17 + - uses: actions/checkout@v3 + - name: golangci-lint + uses: golangci/golangci-lint-action@v3 + with: + version: latest + + govuln: + name: Run govuln check and Publish + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - name: Running govulncheck + uses: Templum/govulncheck-action@v0.0.8 + continue-on-error: true + env: + DEBUG: "true" + with: + go-version: 1.18 # this mush match your code's golang version + vulncheck-version: latest + package: ./... + github-token: ${{ secrets.GITHUB_TOKEN }} + fail-on-vuln: true