Add vulncheck targets to makefiles (#3749)

This lets us easily get an idea of any potential library updates needed to fix known security issues.
kptdev · Jan 24, 2023 · 3c8e2ac · 3c8e2ac
1 parent 852b7cd
commit 3c8e2ac
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/Makefile b/Makefile
@@ -205,3 +205,8 @@ release-ci:
 		$(GORELEASER_IMAGE) \
 		-f "$(GORELEASER_CONFIG)" release \
 		--skip-validate
+
+.PHONY: vulncheck
+vulncheck: build
+	# Scan the source
+	GOFLAGS= go run golang.org/x/vuln/cmd/govulncheck@latest ./...
diff --git a/porch/Makefile b/porch/Makefile
@@ -268,3 +268,8 @@ run-in-kind:
 	kubectl rollout status deployment function-runner --namespace porch-system
 	kubectl rollout status deployment porch-controllers --namespace porch-system
 	kubectl rollout status deployment porch-server --namespace porch-system
+
+.PHONY: vulncheck
+vulncheck: build
+	# Scan the source
+	GOFLAGS= go run golang.org/x/vuln/cmd/govulncheck@latest ./...