From a804f5d6fd9127b43782ce5686bc05f5352708fb Mon Sep 17 00:00:00 2001 From: Diana Shevchenko Date: Tue, 29 Nov 2022 15:23:01 +0100 Subject: [PATCH] Updated workflow --- .github/workflows/govulncheck.yml | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index b6181838c0..3b355007bf 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -25,13 +25,15 @@ jobs: - name: Install and run govulncheck run: | go install golang.org/x/vuln/cmd/govulncheck@latest - govulncheck ./... + govulncheck ./ddtrace/... - name: Comment results - uses: machine-learning-apps/pr-comment@master - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - with: - path: results.txt + run: | + num=$(govulncheck ./ddtrace/... | grep "Vulnerability #" | wc -l) + if [ $num -gt 0 ]; then + echo "Found ${num} vulnerabilities" + exit 1 + fi +