From 862d118e7ae7f62af6cb522628d4fe4c8b6bda75 Mon Sep 17 00:00:00 2001 From: Venktesh Shivam Patel Date: Mon, 8 Dec 2025 12:17:32 +0000 Subject: [PATCH 1/2] fix govulncheck --- .github/workflows/image-promotion.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/image-promotion.yml b/.github/workflows/image-promotion.yml index 05017ea471..b0b005a5ad 100644 --- a/.github/workflows/image-promotion.yml +++ b/.github/workflows/image-promotion.yml @@ -133,6 +133,7 @@ jobs: uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 with: go-version-file: go.mod + cache: false - name: Setup netrc run: | @@ -146,6 +147,7 @@ jobs: - name: govulncheck uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4 with: + repo-checkout: false output-format: sarif output-file: govulncheck.sarif From 019cb7f0e6f617610d17a4479c5bb391b5207a5b Mon Sep 17 00:00:00 2001 From: Venktesh Shivam Patel Date: Mon, 8 Dec 2025 12:20:14 +0000 Subject: [PATCH 2/2] fix govulncheck cache --- .github/workflows/image-promotion.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/image-promotion.yml b/.github/workflows/image-promotion.yml index b0b005a5ad..7cdefc2af9 100644 --- a/.github/workflows/image-promotion.yml +++ b/.github/workflows/image-promotion.yml @@ -133,7 +133,6 @@ jobs: uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 with: go-version-file: go.mod - cache: false - name: Setup netrc run: | @@ -148,6 +147,7 @@ jobs: uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4 with: repo-checkout: false + cache: false output-format: sarif output-file: govulncheck.sarif