git » chasquid » commit 6896b22

github: Use the latest Go version for govulncheck

author Alberto Bertogli
2022-11-12 18:31:57 UTC
committer Alberto Bertogli
2022-11-12 18:31:57 UTC
parent f5949a79f1bd04c148d48c2e9cee02d92167afff

github: Use the latest Go version for govulncheck

govulncheck will complain when run on older Go versions that are known
to have security issues. Github setup-go action has a cache for the
"latest" go version and sometimes the latest isn't really used.

So sometimes, this generates false positives because govulncheck is run
on an older Go version, which is not a problem in chasquid itself.

To prevent those false positives, this patch asks the Github CI to
always check for the latest Go version when running govulncheck.

.github/workflows/govulncheck.yml +1 -0

diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 2455e16..ac5a3a3 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -18,6 +18,7 @@ jobs:
       - uses: actions/setup-go@v3
         with:
           go-version: ">=1.19.2"
+          check-latest: true
       - name: install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest
       - name: run govulncheck