Fix command syntax for backend vulnerability scan#27
Conversation
|
🟡 Dagryn workflow RUNNING
|
|
🟡 Dagryn workflow RUNNING
|
|
🟡 Dagryn workflow RUNNING
|
|
🟡 Dagryn workflow RUNNING
|
|
🟡 Dagryn workflow RUNNING
|
There was a problem hiding this comment.
Pull request overview
This PR updates the Dagryn task configuration intended to run govulncheck for the backend vulnerability scan.
Changes:
- Adjusts the
backend-vulnerability-scantask command indagryn.toml.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
|
||
| [tasks.backend-vulnerability-scan] | ||
| command = "govulncheck -C ./... -json > gosec-report.json" | ||
| command = "govulncheck ./... -json > gosec-report.json" |
There was a problem hiding this comment.
This command will likely fail in two ways: (1) it runs from the repo root even though the Go module lives under backend/ (other backend tasks set workdir = "backend", and the GH workflow uses work-dir: ./backend), and (2) -json is placed after ./...—if govulncheck uses standard Go flag parsing, flags after the first non-flag argument are not parsed and -json will be treated as a package pattern. Set workdir = "backend" for this task (or use govulncheck -C backend ...), and place -json before the package pattern.
| command = "govulncheck ./... -json > gosec-report.json" | |
| workdir = "backend" | |
| command = "govulncheck -json ./... > gosec-report.json" |
|
🟡 Dagryn workflow RUNNING
|
|
❌ Dagryn workflow FAILED
|
Description
[Provide a brief description of the changes in this pull request]
Related Issue
[If applicable, link to the issue this PR addresses]
Type of Change
Checklist
Additional Notes
[Add any additional information or context about the PR here]