Merge pull request #102 from kyma-project/run_vuln_check_action

configures golang/govulncheck-action

.github/workflows/golangci-lint.yaml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
         with:
-          go-version: '1.20'
+          go-version: '1.21'
           cache: false
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v3

.github/workflows/run-vuln-check.yaml

@@ -0,0 +1,19 @@
+name: Run vuln check
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v3
+
+    - name: vulncheck
+      uses: golang/govulncheck-action@v1
+      with:
+        go-version-input: 1.21.5
+        go-package: ./...

Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.20 as builder
+FROM golang:1.21.5 as builder
 ARG TARGETOS
 ARG TARGETARCH