Bind OpenAPI 3.1 multi-type union parameters into any destinations (#… #107

	name: Determine known CVEs through `govulncheck`
	on:
	push:
	branches:
	- main
	schedule:
	# Mondays at 0000
	- cron: "0 0 * * 1"
	jobs:
	check-for-vulnerabilities:
	name: Check for vulnerabilities using `govulncheck`
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	contents: read
	steps:
	- uses: golang/govulncheck-action@032d45514ae346b1db93c04b0c90b841c370344f # v1.1.0
	with:
	go-package: ./...
	# NOTE that we want to produce the SARIF-formatted report, which can then be consumed by other tools ...
	output-format: sarif
	output-file: govulncheck.sarif

	# ... such as the Code Scanning tab (https://github.com/oapi-codegen/runtime/security/code-scanning?query=is%3Aopen+branch%3Amain+tool%3Agovulncheck)
	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
	with:
	sarif_file: govulncheck.sarif
	category: govulncheck

	- name: Print code scanning results URL
	run: \|
	echo "Results: https://github.com/${{ github.repository }}/security/code-scanning?query=is%3Aopen+branch%3Amain+tool%3Agovulncheck"

Navigation Menu