This is an automated email from the ASF dual-hosted git repository.
lostluck pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new 846a1ab6416 Add govulncheck to Go Tests workflow (#28226)
846a1ab6416 is described below
commit 846a1ab64164c6326fd550e2d86f6a0adbf64b66
Author: Jack McCluskey <[email protected]>
AuthorDate: Tue Sep 12 14:34:11 2023 -0400
Add govulncheck to Go Tests workflow (#28226)
* Add govulncheck to Go Tests workflow
* Add manual trigger to go tests
* Broaden govulncheck
---
.github/workflows/go_tests.yml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/.github/workflows/go_tests.yml b/.github/workflows/go_tests.yml
index 07e58bba2f1..e0038a95939 100644
--- a/.github/workflows/go_tests.yml
+++ b/.github/workflows/go_tests.yml
@@ -29,6 +29,7 @@ on:
branches: ['master', 'release-*']
tags: ['v*']
paths: ['sdks/go/pkg/**', 'sdks/go.mod', 'sdks/go.sum',
'sdks/go/container/*', 'sdks/java/container/*', 'sdks/python/container/*',
'sdks/typescript/container/*']
+ workflow_dispatch:
# This allows a subsequently queued workflow run to interrupt previous runs
concurrency:
group: '${{ github.workflow }} @ ${{ github.event.issue.number ||
github.event.pull_request.head.label || github.sha || github.head_ref ||
github.ref }}-${{ github.event.schedule || github.event.comment.body ||
github.event.sender.login}}'
@@ -65,3 +66,8 @@ jobs:
go install "honnef.co/go/tools/cmd/[email protected]"
cd sdks/go/pkg/beam
$(go env GOPATH)/bin/staticcheck ./...
+ - name: Run govulncheck
+ run: |
+ go install golang.org/x/vuln/cmd/govulncheck@latest
+ cd sdks
+ $(go env GOPATH)/bin/govulncheck ./...