govulncheck #547

	# THIS FILE IS AUTOMATICALLY GENERATED. DO NOT EDIT.
	# Edit https://github.com/cert-manager/makefile-modules/blob/main/modules/go/base/.github/workflows/govulncheck.yaml instead.

	# Run govulncheck at midnight every night on the main branch,
	# to alert us to recent vulnerabilities which affect the Go code in this
	# project.
	name: govulncheck
	on:
	workflow_dispatch: {}
	schedule:
	- cron: '0 0 * * *'

	permissions:
	contents: read

	jobs:
	govulncheck:
	runs-on: ubuntu-latest

	if: github.repository == 'cert-manager/cmctl'

	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	# Adding `fetch-depth: 0` makes sure tags are also fetched. We need
	# the tags so `git describe` returns a valid version.
	# see https://github.com/actions/checkout/issues/701 for extra info about this option
	with: { fetch-depth: 0 }

	- id: go-version
	run: \|
	make print-go-version >> "$GITHUB_OUTPUT"

	- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
	with:
	go-version: ${{ steps.go-version.outputs.result }}

	- run: make verify-govulncheck

Provide feedback