Migrate vulnerable-dependencies-checks to datacenter (#2263)

This commit is contained in:
Cesar Celis Hernandez
2022-08-24 20:34:16 -04:00
committed by GitHub
parent 380a9d7faa
commit bcd29a4232

View File

@@ -231,7 +231,7 @@ jobs:
vulnerable-dependencies-checks:
name: "Check for vulnerable dependencies"
runs-on: ${{ matrix.os }}
runs-on: self-hosted
strategy:
matrix:
go-version: [ 1.18.x, 1.19.x ]
@@ -253,9 +253,9 @@ jobs:
CGO_ENABLED: 0
GO111MODULE: on
run: |
sudo apt install jq -y
sudo sysctl net.ipv6.conf.all.disable_ipv6=0
sudo sysctl net.ipv6.conf.default.disable_ipv6=0
sudo apt install jq -y || apt install jq -y
sudo sysctl net.ipv6.conf.all.disable_ipv6=0 || sysctl net.ipv6.conf.all.disable_ipv6=0
sudo sysctl net.ipv6.conf.default.disable_ipv6=0 || sysctl net.ipv6.conf.default.disable_ipv6=0
nancy_version=$(curl --retry 10 -Ls -o /dev/null -w "%{url_effective}" https://github.com/sonatype-nexus-community/nancy/releases/latest | sed "s/https:\/\/github.com\/sonatype-nexus-community\/nancy\/releases\/tag\///")
curl -L -o nancy https://github.com/sonatype-nexus-community/nancy/releases/download/${nancy_version}/nancy-${nancy_version}-linux-amd64 && chmod +x nancy
go list -deps -json ./... | jq -s 'unique_by(.Module.Path)|.[]|select(has("Module"))|.Module' | ./nancy sleuth