Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add GitHub Actions workflow for automated vulnerability scanning (#325) #331

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mdxabu
Copy link

@mdxabu mdxabu commented Feb 11, 2025

Summary:

This PR introduces a GitHub Actions workflow that uses govulncheck to scan the code for vulnerabilities in dependencies and code itself. Upon a push or pull request to the main branch, the workflow performs the following:

  • Installs and verifies the govulncheck tool.
  • Runs the tool to scan for vulnerabilities and stores the results in a vuln.txt file.
  • Generates a summary report in the summary.md file.
  • Uploads both the vulnerability report and summary as artifacts.
  • Commits and pushes the report and summary to the repository.

Related Issue:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Implement GO Vulnerability Check Workflow
1 participant