Performs vulnerability scan using govulncheck and afterwards uploads it as Sarif Report to Github

• Vulnerability Management for Go
• govulncheck docs

Describe how to use your action here.

Please be aware that this workflow highlights all available inputs. But all inputs come with a default value. Hence it is not required to provide any values.

name: My Workflow
on: [push, pull_request]
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Running govulncheck
        uses: Templum/govulncheck-action@<version>
        with:
          package: ./...
          version: v0.0.0-20220908210932-64dbbd7bba4f
          github-token: ${{ secrets.GITHUB_TOKEN }}

Please be aware if the token is not specified it uses github.token for more details on that check those docs