mirror of
https://github.com/imjasonh/govulncheck-action
synced 2026-07-07 00:12:55 +00:00
f4a3fa7150
The action was failing with "Cannot find module '@actions/core'" because node_modules weren't available at runtime. This commit fixes the issue by: - Adding @vercel/ncc to bundle all dependencies into a single dist/index.js file - Updating action.yml to point to the bundled dist/index.js - Adding a build script to compile the action - Including the dist/ directory in the repository (standard for GitHub Actions) This is the recommended approach for JavaScript-based GitHub Actions to ensure all dependencies are available at runtime without requiring npm install. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
19 lines
458 B
YAML
19 lines
458 B
YAML
name: 'Go Vulnerability Check'
|
|
description: 'Run govulncheck and annotate vulnerable dependencies and code'
|
|
author: 'Your Name'
|
|
|
|
inputs:
|
|
working-directory:
|
|
description: 'Directory to run govulncheck in'
|
|
required: false
|
|
default: '.'
|
|
|
|
outputs:
|
|
vulnerabilities-found:
|
|
description: 'Whether vulnerabilities were found'
|
|
vulnerability-count:
|
|
description: 'Number of vulnerabilities found'
|
|
|
|
runs:
|
|
using: 'node20'
|
|
main: 'dist/index.js'
|