Skip to content

Conversation

mcbenjemaa
Copy link
Member

@mcbenjemaa mcbenjemaa commented May 28, 2025

This PR adds govluncheck action to check for CVEs in go packages.

Fixes #487

Copy link

Tests

Please note that running unit and e2e tests requires manual approval from a team member.

e2e tests

We use labels to control which e2e tests contexts are run:

Label Behaviour
none Run Generic tests only
e2e/none skip all e2e tests (documentation etc) - overrides all e2e/* labels Do not run any e2e tests
e2e/flatcar run Flatcar e2e tests Add Flatcar tests

ℹ️ Ask a team member to add the requested labels if you don't have enough permissions.

@mcbenjemaa mcbenjemaa added the e2e/none skip all e2e tests (documentation etc) - overrides all e2e/* labels label May 28, 2025
@wikkyk
Copy link
Collaborator

wikkyk commented Jul 4, 2025

Is dependabot insufficient?

@mcbenjemaa
Copy link
Member Author

Is Dependabot insufficient?

We have agreed long before to add this.

Copy link

=== Symbol Results ===

No vulnerabilities found.

Your code is affected by 0 vulnerabilities.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.

Copy link

sonarqubecloud bot commented Aug 6, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

e2e/none skip all e2e tests (documentation etc) - overrides all e2e/* labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

govulncheck action

2 participants