Merge branch 'develop' into block-pruner #2311

	name: Security CI
	on: [ push, pull_request ]

	jobs:
	snyk:
	name: Snyk and Publish
	runs-on: ubuntu-latest
	steps:
	- name: Checkout Source
	uses: actions/checkout@master
	- name: Run Snyk to check for vulnerabilities
	uses: snyk/actions/golang@master
	continue-on-error: true
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	GOFLAGS: "-buildvcs=false"
	with:
	args: --org=${{ secrets.SNYK_ORG }} --severity-threshold=medium --sarif-file-output=snyk.sarif
	- name: Upload result to GitHub Code Scanning
	uses: github/codeql-action/upload-sarif@v2
	continue-on-error: true
	with:
	sarif_file: snyk.sarif

	snyk-code:
	name: Snyk Code and Publish
	runs-on: ubuntu-latest
	continue-on-error: true
	steps:
	- name: Checkout Source
	uses: actions/checkout@master
	- name: Run Snyk SAST to check for code vulnerabilities
	uses: snyk/actions/golang@master
	continue-on-error: true
	env:
	SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
	with:
	args: --org=${{ secrets.SNYK_ORG }} --sarif-file-output=snyk.sarif
	command: code test
	- name: Upload result to GitHub Code Scanning
	uses: github/codeql-action/upload-sarif@v2
	continue-on-error: true
	with:
	sarif_file: snyk.sarif

	govuln:
	name: Run govuln check and Publish
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	- name: Running govulncheck
	uses: Templum/[email protected]
	continue-on-error: true
	env:
	DEBUG: "true"
	with:
	go-version: 1.19
	vulncheck-version: latest
	package: ./...
	github-token: ${{ secrets.GITHUB_TOKEN }}
	fail-on-vuln: true

	- name: Upload govulncheck report
	uses: actions/upload-artifact@v3
	with:
	name: raw-report
	path: raw-report.json

Provide feedback