From 4b16407855392cac09dc79bbfeb550782e8ecf1f Mon Sep 17 00:00:00 2001 From: Chad Wilson Date: Mon, 8 Apr 2024 10:43:06 +0800 Subject: [PATCH] Make sure we are building/testing with latest Go patch release This is better for security and determinism as otherwise the action uses whatever happens to be cached, which might be old. Signed-off-by: Chad Wilson --- .github/workflows/release-on-pr-merge.yml | 1 + .github/workflows/tests.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/release-on-pr-merge.yml b/.github/workflows/release-on-pr-merge.yml index 77aa659..57c61ac 100644 --- a/.github/workflows/release-on-pr-merge.yml +++ b/.github/workflows/release-on-pr-merge.yml @@ -15,6 +15,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v5 with: + check-latest: true go-version-file: 'go.mod' - name: build diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index df2e621..221f20b 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -21,6 +21,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v5 with: + check-latest: true go-version-file: 'go.mod' - name: Install pkg-config on ${{ matrix.os }}