mirror of
https://github.com/lunchcat/sif.git
synced 2026-04-28 11:33:06 -07:00
84b0b81996
nuclei/v3 v3.8.0 (PR #97) requires go >= 1.25.7 in go.mod. this breaks the existing CI pinned to go 1.24: - build: "go.mod requires go >= 1.25.7 (running go 1.24.13; GOTOOLCHAIN=local)" - lint: "the Go language version (go1.24) used to build golangci-lint is lower than the targeted Go version (1.25.7)" bumps setup-go to 1.25 across all workflows and moves the lint job to golangci-lint-action v8 with golangci-lint v2.11.4 (built with go 1.25). migrates .golangci.yml to the v2 schema: - version: "2" - linters-settings -> linters.settings - issues.exclude-rules -> linters.exclusions.rules - drop gosimple (merged into staticcheck in v2) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
28 lines
562 B
YAML
28 lines
562 B
YAML
name: govulncheck
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
branches: [main]
|
|
schedule:
|
|
- cron: "0 6 * * 1" # monday 06:00 UTC
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
govulncheck:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- name: set up go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: "1.25"
|
|
- name: install govulncheck
|
|
run: go install golang.org/x/vuln/cmd/govulncheck@v1.1.4
|
|
- name: run govulncheck
|
|
run: govulncheck ./...
|
|
continue-on-error: true
|