mirror of
https://github.com/lunchcat/sif.git
synced 2026-04-28 11:33:06 -07:00
ci: pin govulncheck to v1.1.4 - fixes scorecard pinned-dependencies
Signed-off-by: vmfunc <celeste@linux.com>
This commit is contained in:
2
.github/workflows/govulncheck.yml
vendored
2
.github/workflows/govulncheck.yml
vendored
@@ -21,7 +21,7 @@ jobs:
|
||||
with:
|
||||
go-version: "1.24"
|
||||
- name: install govulncheck
|
||||
run: go install golang.org/x/vuln/cmd/govulncheck@latest
|
||||
run: go install golang.org/x/vuln/cmd/govulncheck@v1.1.4
|
||||
- name: run govulncheck
|
||||
run: govulncheck ./...
|
||||
continue-on-error: true
|
||||
|
||||
Reference in New Issue
Block a user