mirror of
https://github.com/arangodb/kube-arangodb.git
synced 2024-12-14 11:57:37 +00:00
[Maintenance] Require vulncheck in the pipeline (#1407)
This commit is contained in:
parent
0beb06192e
commit
2d7ee7ad50
2 changed files with 9 additions and 6 deletions
|
@ -4,8 +4,7 @@ git:
|
|||
depth: false
|
||||
|
||||
go:
|
||||
- "1.19"
|
||||
- "1.20"
|
||||
- "1.20.8"
|
||||
|
||||
go_import_path: github.com/arangodb/kube-arangodb
|
||||
|
||||
|
@ -17,7 +16,7 @@ script:
|
|||
set -e
|
||||
if [ "$TRAVIS_PULL_REQUEST" != "false" ] || [ ! -z "$ALWAYS" ]; then
|
||||
make init
|
||||
make license-verify license-range-verify fmt-verify linter
|
||||
make license-verify license-range-verify fmt-verify linter vulncheck
|
||||
make run-unit-tests
|
||||
make bin
|
||||
else
|
||||
|
|
10
Makefile
10
Makefile
|
@ -286,9 +286,13 @@ linter:
|
|||
linter-fix:
|
||||
@$(GOPATH)/bin/golangci-lint run --fix --build-tags "$(GOBUILDTAGS)" $(foreach LINT_EXCLUDE,$(LINT_EXCLUDES),--exclude '$(LINT_EXCLUDE)') ./...
|
||||
|
||||
.PHONY: vulncheck
|
||||
.PHONY: vulncheck vulncheck-optional
|
||||
vulncheck:
|
||||
@echo ">> Checking for known vulnerabilities"
|
||||
@echo ">> Checking for known vulnerabilities (required)"
|
||||
@$(GOPATH)/bin/govulncheck --tags $(GOBUILDTAGS) ./...
|
||||
|
||||
vulncheck-optional:
|
||||
@echo ">> Checking for known vulnerabilities (optional)"
|
||||
@-$(GOPATH)/bin/govulncheck --tags $(GOBUILDTAGS) ./...
|
||||
|
||||
.PHONY: build
|
||||
|
@ -684,7 +688,7 @@ check-community:
|
|||
@$(MAKE) _check RELEASE_MODE=community
|
||||
|
||||
_check: sync-crds
|
||||
@$(MAKE) fmt yamlfmt license-verify linter run-unit-tests bin vulncheck
|
||||
@$(MAKE) fmt yamlfmt license-verify linter run-unit-tests bin vulncheck-optional
|
||||
|
||||
generate: generate-internal generate-proto fmt
|
||||
|
||||
|
|
Loading…
Reference in a new issue