From 91cad11d19472987a38b652b56881b6ba2d59dcc Mon Sep 17 00:00:00 2001
From: Joe Julian <me@joejulian.name>
Date: Tue, 2 May 2023 10:27:28 -0700
Subject: [PATCH] add govulncheck to CI

Signed-off-by: Joe Julian <me@joejulian.name>
---
 .github/workflows/build-test.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
index 6d0966e98..5345086a3 100644
--- a/.github/workflows/build-test.yml
+++ b/.github/workflows/build-test.yml
@@ -30,6 +30,11 @@ jobs:
           GOLANGCI_LINT_SHA256: '4de479eb9d9bc29da51aec1834e7c255b333723d38dbd56781c68e5dddc6a90b'
       - name: Test style
         run: make test-style
+      - name: Scan for Vulnerabilities
+        uses: Templum/govulncheck-action@6bb063b41d78c53c2fc7f5589828e30ad7c697ee # pin@v1.0.0
+        with:
+          skip-upload: true
+          go-version: '1.20'
       - name: Run unit tests
         run: make test-coverage
       - name: Test build