Merge pull request #712 from go-graphite/deniszh-patch-1

Enabling govulncheck

Author: deniszh

.github/workflows/tests.yml

@@ -54,14 +54,14 @@ jobs:
         env:
           CGO_ENABLED: 1
 
-      #- name: Govulncheck
-      #  if: matrix.go != 'tip'
-      #  id: govulncheck
-      #  uses: golang/govulncheck-action@v1
-      #  with:
-      #    go-version-input: ${{ matrix.go }}
-      #    check-latest: true
-      #    go-package: ./...
+      - name: Govulncheck
+        if: ${{ matrix.go == '1.24.x' }} # only do govulncheck when built with latest stable go
+        id: govulncheck
+        uses: golang/govulncheck-action@v1
+        with:
+          go-version-input: ${{ matrix.go }}
+          check-latest: true
+          go-package: ./...
 
       - name: Check Docker images
         run: |
@@ -90,4 +90,4 @@ jobs:
         if: ${{ github.event_name == 'push' && matrix.go == '1.24.x' }} # only when built from master with latest stable go
         run: make DEVEL=1 packagecloud-autobuilds
         env:
-          PACKAGECLOUD_TOKEN: ${{ secrets.PACKAGECLOUD_TOKEN }}
+          PACKAGECLOUD_TOKEN: ${{ secrets.PACKAGECLOUD_TOKEN }}