Bump actions/checkout from 4.1.7 to 4.2.0 #490
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # GitHub Actions workflow for govulncheck. | |
| # This file is licensed under MIT License. | |
| # https://github.com/fxamacker/cbor | |
| name: govulncheck | |
| # Revoke default permissions and grant what's needed in each job. | |
| permissions: {} | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| paths: | |
| - '**' | |
| - '!**.md' | |
| push: | |
| paths: | |
| - '**' | |
| - '!**.md' | |
| branches: | |
| - 'main' | |
| - 'master' | |
| - 'release*' | |
| - 'feature/stream-mode' | |
| tags: | |
| - 'v*' | |
| schedule: | |
| - cron: '25 14 * * 0' | |
| # | | | | | | |
| # | | | | day of the week (0–6 with 0=Sunday) | |
| # | | | month (1–12) | |
| # | | day of month (1–31) | |
| # | hour (0–23 in UTC) | |
| # minute (0–59) | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.run_id }} | |
| cancel-in-progress: true | |
| jobs: | |
| Check: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| # Grant permission to read content. | |
| contents: read | |
| steps: | |
| - name: Checkout source | |
| uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 | |
| with: | |
| fetch-depth: 1 | |
| - name: Install latest from golang.org | |
| run: go install golang.org/x/vuln/cmd/govulncheck@4ea4418106cea3bb2c9aa098527c924e9e1fbbb4 # v1.1.3 | |
| - name: Run govulncheck | |
| run: govulncheck -show=traces ./... |