From 71e0df81c088bb2604cab88b3c21e92c5bb49435 Mon Sep 17 00:00:00 2001 From: "Mr. Z" Date: Tue, 22 Jul 2025 09:31:57 -0400 Subject: [PATCH] chore(ci): enable govulncheck scanning --- .github/.env.shared | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/.env.shared b/.github/.env.shared index bddbad2..f1e541b 100644 --- a/.github/.env.shared +++ b/.github/.env.shared @@ -44,7 +44,7 @@ ENABLE_FUZZ_TESTING=true # Enable fuzz running tests (requires Go ENABLE_GO_LINT=true # Enable Go code linting steps (golangci-lint) ENABLE_RACE_DETECTION=true # Enable Go's race detector in tests (-race flag) ENABLE_SECURITY_SCAN_NANCY=true # Enable Nancy dependency vulnerability checks -ENABLE_SECURITY_SCAN_GOVULNCHECK=false # Enable govulncheck Go vulnerability scanning (Issue with https://pkg.go.dev/vuln/GO-2024-3218) +ENABLE_SECURITY_SCAN_GOVULNCHECK=true # Enable govulncheck Go vulnerability scanning (Issue with https://pkg.go.dev/vuln/GO-2024-3218) ENABLE_SECURITY_SCAN_GITLEAKS=true # Enable Gitleaks secret scanning ENABLE_STATIC_ANALYSIS=true # Enable static analysis jobs (go vet) ENABLE_VERBOSE_TEST_OUTPUT=false # Enable verbose output for test runs (can slow down CI)