Use SPDX license identifiers

[safcm/safcm.git] / ci / run

diff --git a/ci/run b/ci/run
index 2e12c7c64fdf73ed2a0de908fd99152b943a37f0..bd89e953f82e3f354b1129a69e1cf010ff0218ad 100755 (executable)
--- a/ci/run
+++ b/ci/run
@@ -1,5 +1,8 @@
 #!/bin/sh
 
+# SPDX-License-Identifier: GPL-3.0-or-later
+# Copyright (C) 2021-2024  Simon Ruderich
+
 set -eu
 set -x
 
@@ -32,6 +35,8 @@ make $flags
 make test $flags
 
 # Additional static checks only run in CI
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
 go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
 staticcheck ./...
 go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2