actions-marketplace-validations/Vulnerability scanner for Go

Check your Go code for known vulnerabilities

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Sep 26, 2022
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: actions-marketplace-validations/florianl_govulncheck-action@0eb581f2831553bd3ecb5cc4c7ec66c2334c05bf # no releases — HEAD as of 2026-07-13

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
install-goLet the action install a version of Go. If set to false, the action expects you to have installed Go already. By default Go 1.19 will be installed. notrue
working-directoryPath to the working directory govulncheck should be executed in. no""
govulncheck-versionSpecify a verion of govulncheck to install. By default latest will be used. nolatest
govulncheck-jsonProvide JSON output instead of standard text. nofalse
govulncheck-verbosePrint a full call stack for each identified vulnerability. nofalse
govulncheck-tagsComma-seprated list of Go build tags. no""

no outputs