theupdateframework / go-tuf

Go implementation of The Update Framework (TUF)
https://theupdateframework.com
Apache License 2.0
625 stars 105 forks source link

chore: add govulncheck and bump Go to 1.20 #523

Closed rdimitrov closed 1 year ago

rdimitrov commented 1 year ago

Description of the changes being introduced by the pull request:

The following PR adds govulncheck to CI.

It also includes a change that narrows the jobs running linters and so on to run on a single OS.

Update:

Updated the version of Go from 1.18 to 1.20 since govulncheck found several vulnerabilities when using the 1.18 version - reference.

Release Notes:

Types of changes:

Please verify and check that the pull request fulfills the following requirements: