Merge pull request #16 from ale8k/tweak-go-vuln

No longer checkout and specify go.mod for install from govuln
canonical · Oct 4, 2024 · b60ec5a · b60ec5a
2 parents ccde35a + 0ccfc64
commit b60ec5a
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/.github/actions/security-scan-upload/action.yaml b/.github/actions/security-scan-upload/action.yaml
@@ -35,11 +35,6 @@ runs:
           echo "  upload-sarif-artifact: ${{ inputs.upload-sarif-artifact }}"
           exit 1
         fi
-
-    - name: Setup Go
-      uses: actions/setup-go@v5
-      with:
-        go-version-file: go.mod
     
     #########
     # Trivy #
@@ -75,6 +70,8 @@ runs:
       with:
         output-format: 'sarif'
         output-file: 'govuln-results.sarif'
+        go-version-file: go.mod
+        repo-checkout: false
 
     - name: Upload govuln scan results as artifact
       uses: actions/upload-artifact@v3