State the filer's contract with the plan where it is read, name the step an outage fails, and mark an unfixed vulnerability by name

2026-10-14 13:17:26 +02:00
parent 6a7da08002
commit 15965e7a77
4 changed files with 24 additions and 6 deletions
@@ -78,7 +78,8 @@ jobs:
      - uses: actions/checkout@v7
        with:
          persist-credentials: false
-      - run: docker build --no-cache-filter vulnerabilities --target vulnerability-report --output "$RUNNER_TEMP/vulnerabilities" .
+      - name: Fetch govulncheck's report from vuln.go.dev
+        run: docker build --no-cache-filter vulnerabilities --target vulnerability-report --output "$RUNNER_TEMP/vulnerabilities" .
      - name: File each one in todo.md
        id: file
        run: python3 release-tooling/file_vulnerabilities.py "$RUNNER_TEMP/vulnerabilities/report.json" todo.md