Sergey Vilgelm 862ed88cf0
Run nancy validation for all dependencies (#1243)
* Run nancy validation for all dependencies

* Update pr-extra.yml

Use `-json` flag
2020-07-16 17:14:12 -05:00

20 lines
483 B
YAML

name: Extra
on:
push:
tags:
- v*
branches:
- master
pull_request:
jobs:
vulns:
name: Vulnerability scanner
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-go@v2
# We cannot use nancy-github-action because it is outdated, so it's better to use the latest
# docker image for the validation
- name: nancy
run: go list -json -m all | docker run -i sonatypecommunity/nancy:latest