ewpt3ch/pkgstash
1
1
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

add vulnerabilty check

Browse Source
This commit is contained in:
Eric Phillips
2026-05-07 09:11:48 -06:00
parent 2ae5ee8285
commit 6e2b50fab7
2 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+4 -1
View File
@@ -18,7 +18,7 @@ jobs:
- name: Set up Go - name: Set up Go
uses: actions/setup-go@v5 uses: actions/setup-go@v5
with: with:
go-version: "1.26.0" go-version: "1.26.x"
- name: Install gosec - name: Install gosec
run: go install github.com/securego/gosec/v2/cmd/gosec@latest run: go install github.com/securego/gosec/v2/cmd/gosec@latest
@@ -29,6 +29,9 @@ jobs:
- name: Run gosec - name: Run gosec
run: gosec ./... run: gosec ./...
- name: Run govulncheck
run: govulncheck ./...
style: style:
name: Style name: Style
runs-on: ubuntu-latest runs-on: ubuntu-latest
TODO.md
+6 -2
View File
@@ -1,11 +1,15 @@
- Complete testing - Deployment
- Deployment(PKGBUILD, bootstrap script?) - PKGBUILD
- bootstrap script
- ~ci testing, lint, gosec~
- cd build binary, package
- More complete sync(refresh packages on schedule with db, prefetch updates to pkgs we already have) - More complete sync(refresh packages on schedule with db, prefetch updates to pkgs we already have)
- clean cache of old files - clean cache of old files
- implement streaming - implement streaming
- Add chi for mux - Add chi for mux
- Build server/tool - Build server/tool
- Think about: arch doesn't like partial upgrades, round robin fetching the db files might be an issue - Think about: arch doesn't like partial upgrades, round robin fetching the db files might be an issue
- ~Complete testing~
- ~Add better logging for errors, filename more deatail~ - ~Add better logging for errors, filename more deatail~
- ~package main~ - ~package main~
- ~internal/cache~ - ~internal/cache~