Merge pull request #31 from goark/fix-bugs-and-testing

Update GitHub Actions

.github/workflows/lint.yml

@@ -14,10 +14,10 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v3
       - uses: actions/setup-go@v3
         with:
-          go-version: ^1.18
-      - uses: actions/checkout@v3
+          go-version-file: 'go.mod'
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v3
         with:
@@ -44,3 +44,7 @@ jobs:
           # skip-build-cache: true
       - name: testing
         run: go test -shuffle on ./...
+      - name: install govulncheck
+        run: go install golang.org/x/vuln/cmd/govulncheck@latest
+      - name: running govulncheck
+        run: govulncheck ./...

.github/workflows/vulns.yml

@@ -9,10 +9,10 @@ jobs:
     name: Vulnerability scanner
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-go@v2
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
         with:
-          go-version: ^1.18
+          go-version: ^1.20
       - name: WriteGoList
         run: go list -json -m all > go.list
       - name: Nancy

Taskfile.yml

@@ -5,18 +5,27 @@ tasks:
     cmds:
       - task: clean
       - task: test
+      - task: nancy
 
   test:
     desc: Test and lint.
     cmds:
       - go mod verify
       - go test -shuffle on ./...
-      - docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v1.46.2 golangci-lint run --enable gosec --timeout 3m0s ./...
+      - docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v1.51.1 golangci-lint run --enable gosec --timeout 3m0s ./...
+    sources:
+      - ./go.mod
+      - '**/*.go'
+
+  nancy:
+    desc: Check vulnerability of external packages with Nancy.
+    cmds:
+      - depm list -j | nancy sleuth -n
     sources:
       - ./go.mod
       - '**/*.go'
 
   clean:
     desc: Initialize module and build cache, and remake go.sum file.
     cmds:
-      - go mod tidy -v -go=1.18
+      - go mod tidy -v -go=1.20

go.mod

@@ -1,6 +1,6 @@
 module github.com/goark/pa-api
 
-go 1.18
+go 1.20
 
 require (
 	github.com/goark/errs v1.1.0