From 62867dc4f51731ca26dac429a6f33f595c5a1a68 Mon Sep 17 00:00:00 2001 From: Tang Rufus Date: Wed, 3 Jun 2026 05:07:22 +0100 Subject: [PATCH 1/5] audit-go: Accept `go-version-file` --- .github/workflows/audit-go.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/audit-go.yml b/.github/workflows/audit-go.yml index d90feee..b1cef60 100644 --- a/.github/workflows/audit-go.yml +++ b/.github/workflows/audit-go.yml @@ -3,8 +3,12 @@ name: Audit Go on: workflow_call: inputs: + go-version-file: + description: Path to the go.mod or go.work file. + default: go,mod + type: string go-experiment: - default: "" + default: '' type: string permissions: @@ -17,3 +21,5 @@ jobs: GOEXPERIMENT: ${{ inputs.go-experiment }} steps: - uses: golang/govulncheck-action@31f7c5463448f83528bd771c2d978d940080c9fd # master + with: + go-version-file: ${{ inputs.go-version-file }} From 56b5a0321021010b29f4c112f02d6e457d376868 Mon Sep 17 00:00:00 2001 From: Tang Rufus Date: Wed, 3 Jun 2026 05:08:19 +0100 Subject: [PATCH 2/5] Add go-experiment input to audit-go workflow --- .github/workflows/audit-go.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/audit-go.yml b/.github/workflows/audit-go.yml index b1cef60..cb830b6 100644 --- a/.github/workflows/audit-go.yml +++ b/.github/workflows/audit-go.yml @@ -7,6 +7,7 @@ on: description: Path to the go.mod or go.work file. default: go,mod type: string + go-experiment: default: '' type: string From 5e03d7b548eea058191e49fc318d7fb93382f470 Mon Sep 17 00:00:00 2001 From: Tang Rufus Date: Wed, 3 Jun 2026 05:12:53 +0100 Subject: [PATCH 3/5] Unset go-version in audit-go.yml Unset go-version to prioritize go-version-file. --- .github/workflows/audit-go.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/audit-go.yml b/.github/workflows/audit-go.yml index cb830b6..6314272 100644 --- a/.github/workflows/audit-go.yml +++ b/.github/workflows/audit-go.yml @@ -24,3 +24,4 @@ jobs: - uses: golang/govulncheck-action@31f7c5463448f83528bd771c2d978d940080c9fd # master with: go-version-file: ${{ inputs.go-version-file }} + go-version: '' # Unset to allow `go-version-file` to take effect From 053a776df1d94ff40cb93d782f6393117bdce972 Mon Sep 17 00:00:00 2001 From: Tang Rufus Date: Wed, 3 Jun 2026 05:14:44 +0100 Subject: [PATCH 4/5] Fix default value for go-version-file input --- .github/workflows/audit-go.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/audit-go.yml b/.github/workflows/audit-go.yml index 6314272..d3cf1ec 100644 --- a/.github/workflows/audit-go.yml +++ b/.github/workflows/audit-go.yml @@ -5,7 +5,7 @@ on: inputs: go-version-file: description: Path to the go.mod or go.work file. - default: go,mod + default: go.mod type: string go-experiment: From 465a9a1cee3ea0480c4dc9762d3d5b90cce90367 Mon Sep 17 00:00:00 2001 From: Tang Rufus Date: Wed, 3 Jun 2026 05:19:07 +0100 Subject: [PATCH 5/5] Rename go-version to go-version-input in workflow --- .github/workflows/audit-go.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/audit-go.yml b/.github/workflows/audit-go.yml index d3cf1ec..78be6c7 100644 --- a/.github/workflows/audit-go.yml +++ b/.github/workflows/audit-go.yml @@ -24,4 +24,4 @@ jobs: - uses: golang/govulncheck-action@31f7c5463448f83528bd771c2d978d940080c9fd # master with: go-version-file: ${{ inputs.go-version-file }} - go-version: '' # Unset to allow `go-version-file` to take effect + go-version-input: '' # Unset to allow `go-version-file` to take effect