Merge pull request #761 from kddejong/add-govulncheck-security-scanning

Add govulncheck security scanning

Author: kddejong

.github/dependabot.yml

@@ -3,4 +3,11 @@ updates:
   - package-ecosystem: "gomod" 
     directory: "/" 
     schedule:
-      interval: "monthly"
+      interval: "weekly"
+    groups:
+      minor-and-patch:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/security.yml

@@ -0,0 +1,25 @@
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  schedule:
+    - cron: '0 12 * * *'  # Daily at 12:00 UTC
+
+name: Security Scan
+
+permissions:
+  contents: read
+
+jobs:
+  govulncheck:
+    name: Go Vulnerability Check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      
+      - name: Run govulncheck
+        uses: golang/govulncheck-action@v1

.github/workflows/test.yml

@@ -21,7 +21,7 @@ jobs:
     container: golang:latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Install dependencies
         run: |