Skip to content
alert-triangle

GitHub Action

Go vulnerabilities Action

v1.0.1 Latest version

Go vulnerabilities Action

alert-triangle

Go vulnerabilities Action

Run the Go vulnerability checker

Installation

Copy and paste the following snippet into your .yml file.

              

- name: Go vulnerabilities Action

uses: opzkit/govulncheck-action@v1.0.1

Learn more about this action in opzkit/govulncheck-action

Choose a version

Govulncheck Action

Run go's vulnerability checker.

Usage

See action.yml

Basic

name: Go vulnerabilities check
on: [ push ]
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: check for go vulnerabilities
        uses: opzkit/govulncheck-action@v1.0.0
        # optional
        with:
          go-version: '1.19'
          govuln-version: 'latest'
          packages: './...'

Inputs

Input Description
package (optional) The package you want to scan, default: "./..."
go-version (optional) The go version to use, default: "1.19"
go-version-file (optional) Path to the go.mod file to use for determining go version
check-latest (optional) Check for latest available go version that satisfies the version spec, default default: "false"
govuln-version (optional) The govuln version to use, default: "latest"