ci: add vulnerability-check

2022-09-13 13:21:44 +02:00
parent 610edd6576
commit 7e70411553
2 changed files with 9 additions and 5 deletions
@@ -1,10 +1,7 @@
 include:
 - template: 'Workflows/MergeRequest-Pipelines.gitlab-ci.yml'

-image: golang:1.18
-
-variables:
-  GOFLAGS: -mod=readonly
+image: golang:1.19.1

 stages:
 - deps
@@ -28,3 +25,10 @@ test:
  - curl -Os https://uploader.codecov.io/latest/linux/codecov
  - chmod +x codecov
  - ./codecov -t ${CODECOV_TOKEN} -R $CI_PROJECT_DIR -C $CI_COMMIT_SHA -r $CI_PROJECT_PATH
+
+vulnerabilities:
+  stage: test
+  image: golang:1.19.1
+  script:
+  - go install golang.org/x/vuln/cmd/govulncheck@latest
+  - govulncheck ./...
@@ -1,6 +1,6 @@
 module gitlab.com/unboundsoftware/shiny/authz_client

-go 1.18
+go 1.19

 require (
 	github.com/sparetimecoders/goamqp v0.1.1