Skip to content

feat: add GitHub Actions workflow for automated govulncheck vulnerability scanning#354

Merged
zitsen merged 2 commits intomainfrom
ci/xftan/govuluncheck
Feb 4, 2026
Merged

feat: add GitHub Actions workflow for automated govulncheck vulnerability scanning#354
zitsen merged 2 commits intomainfrom
ci/xftan/govuluncheck

Conversation

@huskar-t
Copy link
Copy Markdown
Collaborator

Description

feat: add GitHub Actions workflow for automated govulncheck vulnerability scanning

Issue(s)

Checklist

Please check the items in the checklist if applicable.

  • Is the user manual updated?
  • Are the test cases passed and automated?
  • Is there no significant decrease in test coverage?

Copilot AI review requested due to automatic review settings January 20, 2026 01:33
@gemini-code-assist
Copy link
Copy Markdown

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds a new GitHub Actions workflow for automated vulnerability scanning using govulncheck, while also updating GitHub Actions versions across all workflow files and simplifying test configuration files.

Changes:

  • Adds new govulncheck.yml workflow for scheduled and push-triggered vulnerability scanning
  • Updates GitHub Actions versions (checkout v4→v6, setup-go v5→v6, cache v4→v5, upload-artifact v4→v6) across all workflows
  • Simplifies taosadapter.toml configuration from 115 lines to 2 lines and adjusts taos.cfg debugFlag from 143 to 135

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 8 comments.

Show a summary per file
File Description
.github/workflows/govulncheck.yml New workflow for automated vulnerability scanning with govulncheck
.github/workflows/enterprise.yml Updates GitHub Actions versions to v6 for checkout/setup-go and upload-artifact
.github/workflows/compatibility.yml Updates GitHub Actions versions to v6 for checkout/setup-go and v5 for cache
.github/workflows/compatibility-3360.yml Updates GitHub Actions versions to v6 for checkout/setup-go
.github/workflows/build.yml Updates GitHub Actions versions to v6 for checkout/setup-go and v5 for cache
.github/workflows/taosadapter.toml Drastically reduces configuration to minimal settings (port and logLevel only)
.github/workflows/taos.cfg Changes debugFlag from 143 to 135

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/govulncheck.yml
Comment thread .github/workflows/govulncheck.yml
Comment thread .github/workflows/govulncheck.yml
Comment thread .github/workflows/govulncheck.yml
Comment thread .github/workflows/govulncheck.yml
Comment thread .github/workflows/govulncheck.yml
Comment thread .github/workflows/taosadapter.toml
Comment thread .github/workflows/taos.cfg
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Jan 20, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.74%. Comparing base (febe6ab) to head (524e1d2).
⚠️ Report is 8 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #354   +/-   ##
=======================================
  Coverage   85.74%   85.74%           
=======================================
  Files          83       83           
  Lines        9149     9149           
=======================================
  Hits         7845     7845           
  Misses        792      792           
  Partials      512      512           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@zitsen zitsen merged commit 82a9aff into main Feb 4, 2026
15 of 17 checks passed
@zitsen zitsen deleted the ci/xftan/govuluncheck branch February 4, 2026 01:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants