Use SPDX license identifiers

[safcm/safcm.git] / ci / run

diff --git a/ci/run b/ci/run
index 97354dc384365dad2eea65060989f0c9af975d7f..bd89e953f82e3f354b1129a69e1cf010ff0218ad 100755 (executable)
--- a/ci/run
+++ b/ci/run
@@ -1,5 +1,8 @@
 #!/bin/sh
 
+# SPDX-License-Identifier: GPL-3.0-or-later
+# Copyright (C) 2021-2024  Simon Ruderich
+
 set -eu
 set -x
 
@@ -32,8 +35,12 @@ make $flags
 make test $flags
 
 # Additional static checks only run in CI
-go install honnef.co/go/tools/cmd/staticcheck@latest
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
+go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
 staticcheck ./...
+go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2
+golangci-lint run
 
 test -z "$(git clean -nd)" # any untracked files left?
 make clean