Merge pull request #224 from arnested/fix-govulncheck-workflow

Be explicit about which version to use for govulncheck

Author: arnested

.github/workflows/codeql-analysis.yml

@@ -31,27 +31,24 @@ jobs:
     - run: git checkout HEAD^2
       if: ${{ github.event_name == 'pull_request' }}
 
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
-      with:
-        languages: go
+    - uses: arnested/go-version-action@v1
+      id: go-version
 
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+    - name: Set up Go ${{ steps.go-version.outputs.latest }}
+      uses: WillAbides/[email protected]
+      with:
+        go-version: ${{ steps.go-version.outputs.latest }}.x
+        ignore-local: true
 
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
+    - run: go version
 
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
+    - run: go build
 
-    #- run: |
-    #   make bootstrap
-    #   make release
+      # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: go
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2

.github/workflows/security.yml

@@ -35,7 +35,13 @@ jobs:
     name: Govulncheck
     runs-on: ubuntu-22.04
     steps:
+    - uses: actions/checkout@v4
+    - uses: arnested/go-version-action@v1
+      id: go-version
+      with:
+        patch-level: true
     - id: govulncheck
       uses: golang/govulncheck-action@master
       with:
-        go-version-file: go.mod
+        go-version-input: ${{ steps.go-version.outputs.latest }}
+        repo-checkout: false

go.mod

@@ -1,6 +1,6 @@
 module github.com/arnested/systemd-state
 
-go 1.21
+go 1.21.1
 
 require (
 	github.com/coreos/go-systemd/v22 v22.5.0