Add run-govulncheck Makefile target

Add a `Makefile` target to run govuln across the submodules. So, it can be imported into a prow job. Signed-off-by: Ivan Valdes <[email protected]>
etcd-io · Jun 15, 2024 · 0430960 · 0430960
1 parent 45f1453
commit 0430960
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/Makefile b/Makefile
@@ -164,6 +164,13 @@ ifeq (, $(shell which yamlfmt))
 endif
 	yamlfmt -conf tools/.yamlfmt .
 
+.PHONY: run-govulncheck
+run-govulncheck:
+ifeq (, $(shell which govulncheck))
+	$(shell go install golang.org/x/vuln/cmd/govulncheck@latest)
+endif
+	PASSES="govuln" ./scripts/test.sh
+
 # Tools
 
 GOLANGCI_LINT_VERSION = $(shell cd tools/mod && go list -m -f {{.Version}} github.com/golangci/golangci-lint)

diff --git a/scripts/test.sh b/scripts/test.sh
@@ -366,6 +366,10 @@ function markdown_marker_pass {
   fi
 }
 
+function govuln_pass {
+  run_for_modules run govulncheck -show verbose
+}
+
 function govet_pass {
   run_for_modules generic_checker run go vet
 }