Updated workflow

DataDog · Nov 29, 2022 · a804f5d · a804f5d
1 parent f6a2c53
commit a804f5d
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
@@ -25,13 +25,15 @@ jobs:
       - name: Install and run govulncheck
         run: |
           go install golang.org/x/vuln/cmd/govulncheck@latest
-          govulncheck ./...
+          govulncheck ./ddtrace/...
       - name: Comment results
-        uses: machine-learning-apps/pr-comment@master
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          path: results.txt
+        run: |
+          num=$(govulncheck ./ddtrace/... | grep "Vulnerability #" | wc -l)
+          if [ $num -gt 0 ]; then
+            echo "Found ${num} vulnerabilities"
+            exit 1
+          fi
+