git » gofer » commit fc1d0d9

github: Use the official govulncheck action

author Alberto Bertogli
2023-07-28 00:18:57 UTC
committer Alberto Bertogli
2023-08-04 00:34:21 UTC
parent f75f4aa56f678fe5bf18086e75c5cdd27d8da704
github: Use the official govulncheck action

Now that there's an official govulncheck action maintained by the golang
team, use that instead of our custom invocation.
.github/workflows/govulncheck.yaml +3 -7 
diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml
index ac5a3a3..4e3aeea 100644
--- a/.github/workflows/govulncheck.yaml
+++ b/.github/workflows/govulncheck.yaml
@@ -13,13 +13,9 @@ jobs:
   govulncheck:
     runs-on: ubuntu-latest
     timeout-minutes: 5
+    name: Run govulncheck
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-go@v3
+      - id: govulncheck
+        uses: golang/govulncheck-action@v1
         with:
-          go-version: ">=1.19.2"
           check-latest: true
-      - name: install govulncheck
-        run: go install golang.org/x/vuln/cmd/govulncheck@latest
-      - name: run govulncheck
-        run: govulncheck ./...