Files
podinfo/.github/workflows/cve-scan.yml
Stefan Prodan b9acae4064 ci: Pin actions and enable release attentions
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2026-03-31 22:27:07 +03:00

26 lines
538 B
YAML

name: cve-scan
on:
workflow_dispatch:
push:
branches:
- "master"
pull_request:
branches:
- "master"
permissions:
contents: read
jobs:
govulncheck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: ./.github/actions/runner-cleanup
- name: Vulnerability scan
id: govulncheck
uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
with:
repo-checkout: false