diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml index e9edd56..4d60993 100644 --- a/.github/workflows/master.yml +++ b/.github/workflows/master.yml @@ -48,6 +48,9 @@ jobs: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} if: env.SONAR_TOKEN != '' + - name: Vulnerability Check + run: go install golang.org/x/vuln/cmd/govulncheck@v1.5.0 && govulncheck ./... + docker: name: Publish Docker Image needs: [ build-test ] diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml index b0dac4e..8749c72 100644 --- a/.github/workflows/sonar.yml +++ b/.github/workflows/sonar.yml @@ -68,4 +68,7 @@ jobs: args: > -Dsonar.pullrequest.key=${{ inputs.pr_id }} -Dsonar.pullrequest.branch=${{ steps.pr.outputs.head_ref }} - -Dsonar.pullrequest.base=${{ steps.pr.outputs.base_ref }} \ No newline at end of file + -Dsonar.pullrequest.base=${{ steps.pr.outputs.base_ref }} + + - name: Vulnerability Check + run: go install golang.org/x/vuln/cmd/govulncheck@v1.5.0 && govulncheck ./... \ No newline at end of file diff --git a/Makefile b/Makefile index 4938221..624710d 100644 --- a/Makefile +++ b/Makefile @@ -1,5 +1,7 @@ .PHONY: build run test cover +GOVULNCHECK_VERSION=v1.5.0 + build: go build -o ./bin/app ./src/cmd/app/main.go @@ -28,3 +30,9 @@ cover: cover-html: go tool cover -html="coverage.out" + +vulncheck-install: + go install golang.org/x/vuln/cmd/govulncheck@$(GOVULNCHECK_VERSION) + +vulncheck: + govulncheck ./... \ No newline at end of file diff --git a/go.mod b/go.mod index ae4c18b..198fbda 100644 --- a/go.mod +++ b/go.mod @@ -24,8 +24,8 @@ require ( github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect github.com/kevinburke/ssh_config v1.6.0 // indirect - github.com/klauspost/compress v1.18.6 // indirect - github.com/klauspost/cpuid/v2 v2.3.0 // indirect + github.com/klauspost/compress v1.19.0 // indirect + github.com/klauspost/cpuid/v2 v2.4.0 // indirect github.com/pjbgf/sha1cd v0.6.0 // indirect github.com/pmezard/go-difflib v1.0.0 // indirect github.com/sergi/go-diff v1.4.0 // indirect diff --git a/go.sum b/go.sum index d0490b6..a7490ca 100644 --- a/go.sum +++ b/go.sum @@ -44,10 +44,10 @@ github.com/joho/godotenv v1.5.1 h1:7eLL/+HRGLY0ldzfGMeQkb7vMd0as4CfYvUVzLqw0N0= github.com/joho/godotenv v1.5.1/go.mod h1:f4LDr5Voq0i2e/R5DDNOoa2zzDfwtkZa6DnEwAbqwq4= github.com/kevinburke/ssh_config v1.6.0 h1:J1FBfmuVosPHf5GRdltRLhPJtJpTlMdKTBjRgTaQBFY= github.com/kevinburke/ssh_config v1.6.0/go.mod h1:q2RIzfka+BXARoNexmF9gkxEX7DmvbW9P4hIVx2Kg4M= -github.com/klauspost/compress v1.18.6 h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao= -github.com/klauspost/compress v1.18.6/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= -github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y= -github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0= +github.com/klauspost/compress v1.19.0 h1:sXLILfc9jV2QYWkzFOPWStmcUVH2RHEB1JCdY2oVvCQ= +github.com/klauspost/compress v1.19.0/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ= +github.com/klauspost/cpuid/v2 v2.4.0 h1:S6Hrbc7+ywsr0r+RLapfGBHfyefhCTwEh3A0tV913Dw= +github.com/klauspost/cpuid/v2 v2.4.0/go.mod h1:19jmZ9mjzoF//ddRSUsv0zfBTJWh3QJh9FNxZTMrGxU= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=