From 121eb79a35ef613256da0bb8751a33fdb6e48a13 Mon Sep 17 00:00:00 2001 From: streamerd Date: Fri, 31 Jul 2026 20:23:30 +0300 Subject: [PATCH] ci: add govulncheck workflow + README badge MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit govulncheck ./... on push, PR, and weekly — gates merges to main once required in branch protection. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/govulncheck.yml | 28 ++++++++++++++++++++++++++++ README.md | 2 ++ 2 files changed, 30 insertions(+) create mode 100644 .github/workflows/govulncheck.yml diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml new file mode 100644 index 0000000..e5cf0b4 --- /dev/null +++ b/.github/workflows/govulncheck.yml @@ -0,0 +1,28 @@ +name: govulncheck + +# Scan this module and its dependencies for known vulnerabilities. Runs on every +# push and pull request (so it gates merges to main), plus weekly to catch +# newly-disclosed advisories in code that hasn't changed. +on: + push: + pull_request: + schedule: + - cron: '19 6 * * 1' # Mondays 06:19 UTC + workflow_dispatch: + +permissions: + contents: read + +jobs: + govulncheck: + name: govulncheck + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - uses: actions/setup-go@v5 + with: + go-version: 'stable' + - name: govulncheck ./... + run: | + go install golang.org/x/vuln/cmd/govulncheck@latest + govulncheck ./... diff --git a/README.md b/README.md index 22a1210..e0afa25 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,7 @@ # auth-go +[![govulncheck](https://github.com/aauth-dev/auth-go/actions/workflows/govulncheck.yml/badge.svg)](https://github.com/aauth-dev/auth-go/actions/workflows/govulncheck.yml) + [![Go Reference](https://pkg.go.dev/badge/github.com/aauth-dev/auth-go.svg)](https://pkg.go.dev/github.com/aauth-dev/auth-go) [![Go Report Card](https://goreportcard.com/badge/github.com/aauth-dev/auth-go)](https://goreportcard.com/report/github.com/aauth-dev/auth-go) [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)