diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index 62991db35f..5a9cce925b 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -15,19 +15,18 @@ jobs: - name: Checkout Go uses: actions/setup-go@v3 with: - go-version: '1.18' + go-version: 'stable' - name: Install govulncheck run: | go install golang.org/x/vuln/cmd/govulncheck@latest - - name: Comment results + - name: Run govulncheck id: results run: | function check_results { results=$(govulncheck $path | grep -Eo '\w+-\d+-\d+' | uniq) num=$(echo $results | wc -l) if [ $num -gt 0 ]; then - echo "Found $num vulnerabilities in $path. Run 'govulncheck $path' to find out more" >> $GITHUB_STEP_SUMMARY - echo "Found $num vulnerabilities in $path. Run 'govulncheck $path' to find out more" + echo "Found $num vulnerabilities in $path. Run 'govulncheck $path' to find out more" | tee $GITHUB_STEP_SUMMARY found=$(( found | 1)) fi } @@ -35,4 +34,4 @@ jobs: path=./appsec/... check_results path=./internal/... check_results path=./profiler/... check_results - exit $found \ No newline at end of file + exit $found