ci: add nancy job

.github/workflows/nancy.yml

@@ -0,0 +1,31 @@
+name: Go Nancy
+
+on:
+ # Scan changed files in PRs (diff-aware scanning):
+ pull_request: {}
+ # Scan on-demand through GitHub Actions interface:
+ workflow_dispatch: {}
+ # Scan mainline branches and report all findings:
+ push:
+ branches: ["master"]
+
+jobs:
+ build:
+ strategy:
+ matrix:
+ go-version: [1.21.x]
+ os: [ubuntu-latest, macos-latest, windows-latest]
+ runs-on: ${{ matrix.os }}
+ steps:
+ - name: Check out code into the Go module directory
+ uses: actions/checkout@v2
+
+ - name: Set up Go 1.x in order to write go.list file
+ uses: actions/setup-go@v2
+ with:
+ go-version: ${{ matrix.go-version }}
+ - name: WriteGoList
+ run: go list -json -m all > go.list
+
+ - name: Nancy
+ uses: sonatype-nexus-community/nancy-github-action@main