Go Dependency Submission
This GitHub Action calculates dependencies for a Go build-target (a Go file with a main function) and submits the list to the Dependency submission API. Dependencies then appear in your repository's dependency graph, and you'll receive Dependabot alerts and updates for vulnerable or out-of-date dependencies.
Example
name: Go Dependency Submission
on:
push:
branches:
- main
# The API requires write permission on the repository to submit dependencies
permissions:
contents: write
# Environment variables to configure Go and Go modules. Customize as necessary
env:
GOPROXY: '' # A Go Proxy server to be used
GOPRIVATE: '' # A list of modules are considered private and not requested from GOPROXY
jobs:
go-action-detection:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@v3
- uses: actions/setup-go@v3
with:
go-version: ">=1.18.0"
- name: Run snapshot action
uses: actions/go-dependency-submission@v1
with:
# Required: Define the repo path to the go.mod file used by the
# build target
go-mod-path: go-example/go.mod
#
# Optional: Define the path of a build target (a file with a
# `main()` function) If not defined, this Action will collect all
# dependencies used by all build targets for the module, which may
# include Go dependencies used by tests and tooling.
go-build-target: go-example/cmd/octocat.go
4 Sep 19, 2022
35 Aug 24, 2022
3 May 18, 2022
4 May 3, 2022
14 Jan 3, 2023
16 Dec 17, 2022
5 Aug 19, 2022
7 Oct 25, 2022
1 Dec 26, 2021
4 Oct 18, 2022
10 Nov 6, 2022
486 Dec 25, 2022
65 Dec 26, 2022
2 Feb 13, 2022
26 Jan 2, 2023
31 Dec 30, 2022
15 Jul 14, 2022
9 Oct 14, 2022
5 Oct 31, 2022