Skip to content

build: add govulncheck dependency vulnerability scan#282

Merged
BoxBoxJason merged 2 commits into
mainfrom
ci/vulnerability-check
Jun 13, 2026
Merged

build: add govulncheck dependency vulnerability scan#282
BoxBoxJason merged 2 commits into
mainfrom
ci/vulnerability-check

Conversation

@BoxBoxJason

Copy link
Copy Markdown
Owner

Description of your changes

This PR adds a dedicated makefile command make vuln that runs a govulncheck analysis. This allows detecting vulnerable code / dependencies.

This also runs in the CI.

Closes #255

I have:

  • Followed the git conventional commit message format.
  • Made sure all changes are covered by proper tests, reaching a coverage of at least 80% when applicable.

How has this code been tested

I have:

  • Made sure make lint passes to verify that the code style is correct.
  • Made sure make test passes to verify that the code is working as intended.
  • Made sure make e2e passes to verify that end-to-end tests pass against a real SonarQube instance.
  • Added unit tests to cover the code changes.
  • Added end-to-end tests if necessary.

Signed-off-by: BoxBoxJason <contact@boxboxjason.dev>
@BoxBoxJason BoxBoxJason added this to the User Production Readiness milestone Jun 13, 2026
@BoxBoxJason BoxBoxJason self-assigned this Jun 13, 2026
@BoxBoxJason BoxBoxJason added enhancement New feature or request deps Related to dependencies upgrade / configuration labels Jun 13, 2026
Signed-off-by: BoxBoxJason <contact@boxboxjason.dev>
@BoxBoxJason BoxBoxJason merged commit c9c9559 into main Jun 13, 2026
5 checks passed
@BoxBoxJason BoxBoxJason deleted the ci/vulnerability-check branch June 13, 2026 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Related to dependencies upgrade / configuration enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add dependency / vulnerability scanning to CI

1 participant