We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 8975d48 commit d58e20dCopy full SHA for d58e20d
.github/workflows/security.yml
@@ -26,15 +26,8 @@ jobs:
26
uses: securego/gosec@master
27
with:
28
args: ./...
29
- env:
30
- CLOUDCONNEXA_BASE_URL: ${{ vars.CLOUDCONNEXA_BASE_URL }}
31
- CLOUDCONNEXA_CLIENT_ID: ${{ secrets.CLOUDCONNEXA_CLIENT_ID }}
32
- CLOUDCONNEXA_CLIENT_SECRET: ${{ secrets.CLOUDCONNEXA_CLIENT_SECRET }}
33
34
- - name: Generate dependencies list
35
- run: go list -json -m all > go.list
36
-
37
- - name: Run nancy for dependency scanning
38
- uses: sonatype-nexus-community/nancy-github-action@main
39
- with:
40
- goListFile: go.list
+ - name: Run govulncheck
+ run: |
+ go install golang.org/x/vuln/cmd/govulncheck@latest
+ govulncheck ./...
0 commit comments