From 38c17cd4e868b09efe364c45d247d60eed6bb5fe Mon Sep 17 00:00:00 2001 From: Martin Hutchinson Date: Thu, 4 Jul 2024 11:06:44 +0100 Subject: [PATCH] Use the version in the go.mod file for vuln checks This actually secures the build tooling used for this repo, instead of having an arbitrary side check which notifies us of issues in the core Go libraries. --- .github/workflows/govulncheck.yml | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index 55754ae530..46cfde7a6e 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -19,5 +19,5 @@ jobs: - id: govulncheck uses: golang/govulncheck-action@dd0578b371c987f96d1185abb54344b44352bd58 # v1.0.3 with: - go-version-input: 1.21.12 + go-version-file: go.mod go-package: ./... diff --git a/go.mod b/go.mod index 3237d004e2..ef294217cb 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/google/certificate-transparency-go -go 1.21.0 +go 1.21.12 require ( github.com/DATA-DOG/go-sqlmock v1.5.2