add vulnerability scanner to pipeline
@@ -30,6 +30,17 @@ jobs:
else
exit 0
fi
+ Vulnerability-Scanning:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v3
+ - name: Scan for Vulnerabilities in Code
+ uses: Templum/govulncheck-action@<version>
+ with:
+ go-version: 1.19
+ vulncheck-version: latest
+ package: ./...
+ fail-on-vuln: true
Unit-Tests:
needs: [Run-Swagger]
runs-on: ubuntu-latest
@@ -95,7 +106,7 @@ jobs:
- name: Acceptance tests (modules)
run: ./test/run.sh --acceptance-only
Push-Docker:
- needs: [Acceptance-Tests, Modules-Acceptance-Tests, Unit-Tests, Integration-Tests]
+ needs: [Acceptance-Tests, Modules-Acceptance-Tests, Unit-Tests, Integration-Tests, Vulnerability-Scanning]
runs-on: ubuntu-latest
if: ${{ !github.event.pull_request.head.repo.fork }} # no PRs from fork
steps:
