Files
wonderwall/.github/workflows/checks.yaml
T

33 lines
1.2 KiB
YAML

name: Scheduled checks
on:
schedule: # Every day at 9:42 UTC
- cron: '42 9 * * *'
workflow_dispatch:
permissions:
contents: read
jobs:
staticcheck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # ratchet:actions/checkout@v7
with:
persist-credentials: false
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # ratchet:actions/setup-go@v7
with:
go-version-file: 'go.mod'
- uses: geomys/sandboxed-step@a6bfc174e532cea4f378e3427bcde8b714c2e810 # ratchet:geomys/sandboxed-step@v1.2.2
with:
run: go run honnef.co/go/tools/cmd/staticcheck@latest ./...
govulncheck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # ratchet:actions/checkout@v7
with:
persist-credentials: false
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # ratchet:actions/setup-go@v7
with:
go-version-file: 'go.mod'
- uses: geomys/sandboxed-step@a6bfc174e532cea4f378e3427bcde8b714c2e810 # ratchet:geomys/sandboxed-step@v1.2.2
with:
run: go run golang.org/x/vuln/cmd/govulncheck@latest ./...