git » chasquid » commit 6896b22

github: Use the latest Go version for govulncheck

github: Use the latest Go version for govulncheck

govulncheck will complain when run on older Go versions that are known
to have security issues. Github setup-go action has a cache for the
"latest" go version and sometimes the latest isn't really used.

So sometimes, this generates false positives because govulncheck is run
on an older Go version, which is not a problem in chasquid itself.

To prevent those false positives, this patch asks the Github CI to
always check for the latest Go version when running govulncheck.

diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 2455e16..ac5a3a3 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -18,6 +18,7 @@ jobs:
       - uses: actions/setup-go@v3
         with:
           go-version: ">=1.19.2"
+          check-latest: true
       - name: install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest
       - name: run govulncheck