dependabot[bot] d6db13d763
build(deps): bump sonatype-nexus-community/nancy-github-action (#1762)
Bumps [sonatype-nexus-community/nancy-github-action](https://github.com/sonatype-nexus-community/nancy-github-action) from 1.0.1 to v1.0.2.
- [Release notes](https://github.com/sonatype-nexus-community/nancy-github-action/releases)
- [Commits](https://github.com/sonatype-nexus-community/nancy-github-action/compare/1.0.1...aae196481b961d446f4bff9012e4e3b63d7921a4)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Xiang Dai <long0dai@foxmail.com>
Co-authored-by: Xiang Dai <long0dai@foxmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-22 14:59:06 +08:00

20 lines
399 B
YAML

name: Extra
on:
push:
tags:
- v*
branches:
- master
pull_request:
jobs:
vulns:
name: Vulnerability scanner
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-go@v2
- name: Run go list
run: go list -json -m all > go.list
- name: Nancy
uses: sonatype-nexus-community/nancy-github-action@v1.0.2