add dependency check

2023-04-28 23:23:24 +02:00
parent 50f8585d96
commit 9079285d10
1 changed files with 21 additions and 1 deletions
--- a/.github/workflows/quality-checks.yml
+++ b/.github/workflows/quality-checks.yml
@@ -21,8 +21,28 @@ jobs:
        uses: golangci/golangci-lint-action@v3
        with:
          version: latest
+
+  dep-vulnerability:
+    name: Dependency vulnerability scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Prepare go environment
+        uses: actions/setup-go@v4
+        with:
+          go-version: '1.20'
+          cache: false
+      - name: Install dep scanner
+        run: |
+          go install golang.org/x/vuln/cmd/govulncheck@latest
+      - name: Vendoring
+        run: | 
+          go mod vendor
+      - name: Check
+        run: |
+          govulncheck ./...
  tests:
-    name: Test
+    name: Tests
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3