build(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#1218)
Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action) from 1.0.4 to 1.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/golang/govulncheck-action/releases">golang/govulncheck-action's releases</a>.</em></p> <blockquote> <h2>v1.1.0</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/golang/govulncheck-action/compare/v1.0.4...v1.1.0">https://github.com/golang/govulncheck-action/compare/v1.0.4...v1.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="032d45514a"><code>032d455</code></a> action.yml: use step-level env vars instead of direct vars in commands</li> <li><a href="3fa7bd9cee"><code>3fa7bd9</code></a> action.yml: unset GOOS/GOARCH when installing govulncheck</li> <li><a href="31f7c54634"><code>31f7c54</code></a> action.yml: pin action dependencies to full commit SHAs</li> <li><a href="5accf6f1b7"><code>5accf6f</code></a> action.yml: update dependencies</li> <li><a href="357ea4a541"><code>357ea4a</code></a> action.yml: specify cache-dependency-path</li> <li><a href="1ea760651e"><code>1ea7606</code></a> action.yml: update actions to fix caching issue</li> <li><a href="f03a9d4ce4"><code>f03a9d4</code></a> README.md: fix typo</li> <li>See full diff in <a href="b625fbe08f...032d45514a">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
parent
8227246472
commit
a6764cf838
1 changed files with 1 additions and 1 deletions
2
.github/workflows/nightly.yml
vendored
2
.github/workflows/nightly.yml
vendored
|
|
@ -16,7 +16,7 @@ jobs:
|
|||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Run govulncheck
|
||||
uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
|
||||
uses: golang/govulncheck-action@032d45514ae346b1db93c04b0c90b841c370344f # v1.1.0
|
||||
with:
|
||||
go-version-file: go.mod
|
||||
go-package: ./...
|
||||
|
|
|
|||
Loading…
Reference in a new issue