Add govulncheck to default go-workflow
Build and Push / build (push) Has been cancelled

Scan Go dependencies against the vulnerability database automatically
on every run, between vet and test. Fail fast on known CVEs before
spending time running the full test suite.
- rootfs/usr/local/bin/go-workflow: add govulncheck ./... as step 4; renumber build to step 6
- README.md: update default workflow diagram to include govulncheck

README.md
rootfs/usr/local/bin/go-workflow
This commit is contained in:
2026-07-03 11:14:46 -04:00
parent 3ba7473c95
commit bc1eb17c2f
2 changed files with 5 additions and 3 deletions
+1 -1
View File
@@ -25,7 +25,7 @@ Mount your project at `/app` and run with no arguments. The container
automatically runs the full Go workflow:
```
go mod tidy → gofmt -w . → go vet ./... → go test ./... → go build ./...
go mod tidy → gofmt -w . → go vet ./... → govulncheck ./... → go test ./... → go build ./...
```
```shell