diff --git a/.github/workflows/govulncheck-action.yml b/.github/workflows/govulncheck-action.yml index 47e7df9..68e6750 100644 --- a/.github/workflows/govulncheck-action.yml +++ b/.github/workflows/govulncheck-action.yml @@ -1,4 +1,4 @@ -name: Build & Test 'govulncheck-action' +name: govulncheck-action on: push: branches: @@ -7,6 +7,7 @@ on: - '*.*' paths: - 'govulncheck-action/**' + - '.github/workflows/govulncheck-action.yml' pull_request: branches: - master @@ -15,11 +16,8 @@ on: jobs: test: - runs-on: ${{ matrix.os }} - strategy: - matrix: - os: [ ubuntu-latest ] - name: Test + runs-on: ubuntu-latest + name: Test govulncheck-action steps: - name: Checkout code @@ -37,7 +35,20 @@ jobs: key: ${{ runner.os }}-go-${{ hashFiles ('**/go.sum') }} restore-keys: | ${{ runner.os }}-go- - + + - name: Test + working-directory: govulncheck-action + run: | + make test + + lint: + runs-on: ubuntu-latest + name: Lint govulncheck-action + + steps: + - name: Checkout code + uses: actions/checkout@v4 + - name: Lint uses: golangci/golangci-lint-action@v8 with: @@ -45,9 +56,4 @@ jobs: version: v2.1.6 skip-pkg-cache: true skip-build-cache: true - args: --config=.golangci.yml --verbose . - - - name: Test - working-directory: govulncheck-action - run: | - make test \ No newline at end of file + args: --config=.golangci.yml --verbose . \ No newline at end of file diff --git a/govulncheck-action/README.md b/govulncheck-action/README.md index 99229ad..269006c 100644 --- a/govulncheck-action/README.md +++ b/govulncheck-action/README.md @@ -16,13 +16,13 @@ ignored-vulnerabilities: As an example: ``` ignored-vulnerabilities: - # Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes - # More info: https://pkg.go.dev/vuln/GO-2025-3547 - # Module: k8s.io/kubernetes - # Fixed in: N/A - - id: GO-2025-3547 - silence-until: 2020-05-10 - info: https://pkg.go.dev/vuln/GO-2025-3547 + # Kubernetes kube-apiserver Vulnerable to Race Condition in k8s.io/kubernetes + # More info: https://pkg.go.dev/vuln/GO-2025-3547 + # Module: k8s.io/kubernetes + # Fixed in: N/A + - id: GO-2025-3547 + silence-until: 2020-05-10 + info: https://pkg.go.dev/vuln/GO-2025-3547 ``` ## Best practices