Merge pull request #594 from fxamacker/dependabot/github_actions/gith… #501

	# GitHub Actions workflow for govulncheck.
	# This file is licensed under MIT License.
	# https://github.com/fxamacker/cbor

	name: govulncheck

	# Revoke default permissions and grant what's needed in each job.
	permissions: {}

	on:
	workflow_dispatch:
	pull_request:
	paths:
	- '**'
	- '!**.md'
	push:
	paths:
	- '**'
	- '!**.md'
	branches:
	- 'main'
	- 'master'
	- 'release*'
	- 'feature/stream-mode'
	tags:
	- 'v*'
	schedule:
	- cron: '25 14 * * 0'
	# \| \| \| \| \|
	# \| \| \| \| day of the week (0–6 with 0=Sunday)
	# \| \| \| month (1–12)
	# \| \| day of month (1–31)
	# \| hour (0–23 in UTC)
	# minute (0–59)

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.run_id }}
	cancel-in-progress: true

	jobs:
	Check:
	runs-on: ubuntu-latest
	permissions:
	# Grant permission to read content.
	contents: read
	steps:
	- name: Checkout source
	uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
	with:
	fetch-depth: 1

	- name: Install Go and setup env
	uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version: 1.23
	check-latest: true

	- name: Install latest govulncheck
	run: go install golang.org/x/vuln/cmd/govulncheck@4ea4418106cea3bb2c9aa098527c924e9e1fbbb4 # v1.1.3

	- name: Run govulncheck
	run: govulncheck -show=traces ./...

Provide feedback