Replace govulncheck-action by just running the commands

sapcc · Nov 8, 2024 · f87845f · f87845f
1 parent 6f8bf7e
commit f87845f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/internal/core/constants.go b/internal/core/constants.go
@@ -42,6 +42,5 @@ const (
 
 	GolangciLintAction = "golangci/golangci-lint-action@v6"
 	GoreleaserAction   = "goreleaser/goreleaser-action@v6"
-	GovulncheckAction  = "golang/govulncheck-action@v1"
 	MisspellAction     = "reviewdog/action-misspell@v1"
 )
diff --git a/internal/ghworkflow/workflow_checks.go b/internal/ghworkflow/workflow_checks.go
@@ -41,9 +41,16 @@ func checksWorkflow(cfg core.Configuration) {
 			Run:  "make check-dependency-licenses",
 		})
 
+		// we are not using golang/govulncheck-action because that always wants to install go again
+		// https://github.com/golang/govulncheck-action/blob/master/action.yml
+		j.addStep(jobStep{
+			Name: "Install govulncheck",
+			Run:  "go install golang.org/x/vuln/cmd/govulncheck@latest",
+		})
+
 		j.addStep(jobStep{
 			Name: "Run govulncheck",
-			Uses: core.GovulncheckAction,
+			Run:  "govulncheck -format text ./...",
 		})
 	}