ci: run govulncheck

[safcm/safcm.git] / ci / run

diff --git a/ci/run b/ci/run
index 97354dc384365dad2eea65060989f0c9af975d7f..4dbfefe1a3ffc1d79bc795756d3281e7f0ad0efc 100755 (executable)
--- a/ci/run
+++ b/ci/run
@@ -32,8 +32,12 @@ make $flags
 make test $flags
 
 # Additional static checks only run in CI
-go install honnef.co/go/tools/cmd/staticcheck@latest
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
+go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
 staticcheck ./...
+go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2
+golangci-lint run
 
 test -z "$(git clean -nd)" # any untracked files left?
 make clean