Lint and audit dependencies

meyermarcel · Aug 25, 2024 · 88aa58f · 88aa58f
1 parent e412c6c
commit 88aa58f
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 4 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -25,6 +25,12 @@ jobs:
       - name: Init dummy owners CSV
         run: make dummy-csv
 
+      - name: Audit dependencies
+        run: make audit
+
+      - name: Go mod tidy
+        run: go mod tidy -diff
+
       - name: Lint
         uses: golangci/golangci-lint-action@v6
         with:

diff --git a/Makefile b/Makefile
@@ -24,6 +24,7 @@ test: dummy-csv
 .PHONY: lint
 lint: dummy-csv
 # See .golangci.yml
+	go mod tidy -diff
 	golangci-lint run
 
 .PHONY: build
@@ -37,6 +38,11 @@ markdown: build
 
 # Individual commands
 
+.PHONY: audit
+audit:
+	go mod verify
+	go run golang.org/x/vuln/cmd/govulncheck@latest ./...
+
 .PHONY: format
 format:
 	gofumpt -l -w .

diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/meyermarcel/icm
 
-go 1.22
+go 1.23
 
 require (
 	github.com/logrusorgru/aurora/v4 v4.0.0
@@ -18,6 +18,6 @@ require (
 	github.com/kr/pretty v0.2.0 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
-	golang.org/x/sys v0.22.0 // indirect
+	golang.org/x/sys v0.23.0 // indirect
 	gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 // indirect
 )
diff --git a/go.sum b/go.sum
@@ -30,8 +30,8 @@ github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO
 golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys=
 golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
-golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.23.0 h1:YfKFowiIMvtgl1UERQoTPPToxltDeZfbj4H7dVUCwmM=
+golang.org/x/sys v0.23.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=