glaringattain/Golang Vulncheck
Performs vulnerability scan using govulncheck and afterwards uploads it as Sarif Report to Github
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| package | The package you want to scan, by default will be ./... | no | ./... |
| working-directory | The working directory, from where the scan should start, by default will be github.workspace | no | ${{ github.workspace }} |
| go-version | Can be any Tag for the golang docker image, but should ideally match your runtime go version. By default 1.21.4 is assumed | no | 1.21.4 |
| vulncheck-version | Version of govulncheck that should be used, by default v1.1.3 | no | v1.1.3 |
| github-token | Github App token to upload sarif report. Needs write permissions for security_events. By default it will use 'github.token' value | no | ${{ github.token }} |
| fail-on-vuln | This allows you to specify if the action should fail on encountering any vulnerability, by default it will not | no | false |
| skip-upload | This flag allows you to skip the sarif upload, it will be instead written to disk | no | false |
Outputs
no outputs