This repository contains a GitHub Action that scans Golang dependencies for vulnerabilities using Trivy. Detected vulnerabilities are listed in the Security tab of this repository.
- Automated scanning of Golang dependencies.
- Integration with GitHub Actions for continuous security checks.
- Detailed vulnerability reports accessible via the Security tab.
To use this GitHub Action in your repository, follow these steps:
- Create a
.github/workflows/trivy-scan.yml
file in your repository. - Copy the contents of the
trivy-scan.yml
file from this repository into your newly created file. - Commit and push the changes to your repository.
The action will automatically run and scan your Golang dependencies for vulnerabilities.