We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent bc55523 commit 7128e99Copy full SHA for 7128e99
.github/workflows/security-scan.yml
@@ -64,8 +64,13 @@ jobs:
64
go install golang.org/x/vuln/cmd/govulncheck@latest
65
govulncheck ./... || echo "Vulnerabilities found"
66
67
+ - name: Download dependencies for scanning
68
+ run: go mod download
69
+
70
- name: Run Nancy (OSS Index scanner)
- uses: sonatype-nexus-community/nancy-github-action@main
71
+ run: |
72
+ go install github.com/sonatype-nexus-community/nancy@latest
73
+ go list -json -m all | nancy sleuth
74
continue-on-error: true
75
76
# Scan container images
0 commit comments