-
Notifications
You must be signed in to change notification settings - Fork 0
37 lines (35 loc) · 857 Bytes
/
audit.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
name: Audit
on:
pull_request:
paths:
- '**/*.go'
- .github/workflows/audit.yml
- go.mod
- go.sum
push:
branches:
- main
schedule:
- cron: 0 2 * * *
workflow_dispatch: ~
permissions: read-all
jobs:
vulnerabilities:
name: Vulnerabilities
runs-on: ubuntu-22.04
steps:
- name: Checkout repository
uses: actions/checkout@v4.1.6
- name: Install Go
uses: actions/setup-go@v5.0.1
with:
go-version-file: go.mod
- name: Verify action checksums
env:
JOB: ${{ github.job }}
WORKFLOW: ${{ github.workflow_ref }}
run: |
WORKFLOW=$(echo "$WORKFLOW" | cut -d '@' -f 1 | cut -d '/' -f 3-5)
go run ./cmd/ghasum verify -cache /home/runner/work/_actions -no-evict -offline "$WORKFLOW:$JOB"
- name: Audit
run: go run tasks.go audit