Merge pull request #121 from im-kulikov/enable-deps-vulnerabilities

Enable Nancy (deps vulnerabilities checker)
im-kulikov · Apr 13, 2022 · 97eb3ce · 97eb3ce
2 parents 5136aff + 9c0cc39
commit 97eb3ce
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -24,6 +24,12 @@ jobs:
       with:
         fetch-depth: 0
 
+    - name: dump dependencies (for nancy)
+      run: go list -json -m all > go.list
+
+    - name: Nancy (deps vulnerabilities)
+      uses: sonatype-nexus-community/nancy-github-action@main
+
     - name: golangci-lint
       with: { version: latest }
       uses: golangci/golangci-lint-action@v2