From 92f035e6a88a968be0a1f70cb20503e832e00104 Mon Sep 17 00:00:00 2001 From: Chris Bandy Date: Tue, 14 Jan 2025 16:27:50 +0000 Subject: [PATCH] Submit govulncheck results to GitHub Code Scanning The SARIF results from govulncheck should be compatible with GitHub since v1.1.4. See: https://github.com/golang/vuln/releases/tag/v1.1.4 --- .github/workflows/govulncheck.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/govulncheck.yaml b/.github/workflows/govulncheck.yaml index 022a97e89..df81b90e5 100644 --- a/.github/workflows/govulncheck.yaml +++ b/.github/workflows/govulncheck.yaml @@ -38,8 +38,6 @@ jobs: uses: github/codeql-action/upload-sarif@v3 with: sarif_file: 'govulncheck-results.sarif' - # TODO: https://go.dev/issue/70157 - if: ${{ false }} # Print any detected vulnerabilities to the workflow log. This step fails # when the tool detects a vulnerability in code that is called.