mirror of
https://github.com/etcd-io/etcd.git
synced 2024-09-27 06:25:44 +00:00
20f7988c1d
By running `find -exec`, an error exit code doesn't properly return the error if there's a failure in a command executed. Use `xargs` to force an exit with error when a command fails to run. Signed-off-by: Ivan Valdes <ivan@vald.es>
22 lines
727 B
YAML
22 lines
727 B
YAML
---
|
|
name: Go Vulnerability Checker
|
|
on: [push, pull_request]
|
|
permissions: read-all
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
|
|
- id: goversion
|
|
run: echo "goversion=$(cat .go-version)" >> "$GITHUB_OUTPUT"
|
|
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
|
|
with:
|
|
go-version: ${{ steps.goversion.outputs.goversion }}
|
|
- run: date
|
|
- run: |
|
|
set -euo pipefail
|
|
|
|
go install golang.org/x/vuln/cmd/govulncheck@latest
|
|
|
|
find . -name go.mod | xargs -I'{}' /bin/bash -c 'echo scanning $(dirname {}); govulncheck -C $(dirname {}) -show verbose ./...'
|