Skip to content

Commit 7128e99

Browse files
committed
Fix: Replace nancy-github-action with direct CLI installation to avoid Docker build errors
1 parent bc55523 commit 7128e99

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

.github/workflows/security-scan.yml

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,8 +64,13 @@ jobs:
6464
go install golang.org/x/vuln/cmd/govulncheck@latest
6565
govulncheck ./... || echo "Vulnerabilities found"
6666
67+
- name: Download dependencies for scanning
68+
run: go mod download
69+
6770
- name: Run Nancy (OSS Index scanner)
68-
uses: sonatype-nexus-community/nancy-github-action@main
71+
run: |
72+
go install github.com/sonatype-nexus-community/nancy@latest
73+
go list -json -m all | nancy sleuth
6974
continue-on-error: true
7075

7176
# Scan container images

0 commit comments

Comments
 (0)