diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 59e3dfe..f463e37 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -25,6 +25,12 @@ jobs: - name: Init dummy owners CSV run: make dummy-csv + - name: Audit dependencies + run: make audit + + - name: Go mod tidy + run: go mod tidy -diff + - name: Lint uses: golangci/golangci-lint-action@v6 with: diff --git a/Makefile b/Makefile index ac18c0b..eef7816 100644 --- a/Makefile +++ b/Makefile @@ -24,6 +24,7 @@ test: dummy-csv .PHONY: lint lint: dummy-csv # See .golangci.yml + go mod tidy -diff golangci-lint run .PHONY: build @@ -37,6 +38,11 @@ markdown: build # Individual commands +.PHONY: audit +audit: + go mod verify + go run golang.org/x/vuln/cmd/govulncheck@latest ./... + .PHONY: format format: gofumpt -l -w . diff --git a/go.mod b/go.mod index dcb99cd..6bb75a9 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/meyermarcel/icm -go 1.22 +go 1.23 require ( github.com/logrusorgru/aurora/v4 v4.0.0 @@ -18,6 +18,6 @@ require ( github.com/kr/pretty v0.2.0 // indirect github.com/rivo/uniseg v0.4.7 // indirect github.com/russross/blackfriday/v2 v2.1.0 // indirect - golang.org/x/sys v0.22.0 // indirect + golang.org/x/sys v0.23.0 // indirect gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 // indirect ) diff --git a/go.sum b/go.sum index 8fc37a8..633929f 100644 --- a/go.sum +++ b/go.sum @@ -30,8 +30,8 @@ github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys= golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI= -golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.23.0 h1:YfKFowiIMvtgl1UERQoTPPToxltDeZfbj4H7dVUCwmM= +golang.org/x/sys v0.23.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo= gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=