Use run_go_tool to execute govulncheck

ivanvc · ivanvc · commit b1a881ec4316 · 2025-09-09T15:43:00.000-07:00
Signed-off-by: Ivan Valdes &lt;ivan@vald.es&gt;
diff --git a/Makefile b/Makefile
@@ -194,9 +194,6 @@ endif
 
 .PHONY: run-govulncheck
 run-govulncheck:
-ifeq (, $(shell command -v govulncheck))
-	$(shell go install golang.org/x/vuln/cmd/govulncheck@latest)
-endif
 	PASSES="govuln" ./scripts/test.sh
 
 # Tools
diff --git a/scripts/test.sh b/scripts/test.sh
@@ -398,7 +398,9 @@ function markdown_marker_pass {
 }
 
 function govuln_pass {
-  run_for_modules run govulncheck -show verbose
+  local version
+  version=$(cd tools/mod && go list -m -f '{{.Version}}' golang.org/x/vuln)
+  run_for_modules run_go_tool "golang.org/x/vuln/cmd/govulncheck@${version}" -show verbose
 }
 
 function govet_pass {

Original file line number	Diff line number	Diff line change
`@@ -398,7 +398,9 @@ function markdown_marker_pass {`
`398`	`398`	`}`
`399`	`399`
`400`	`400`	`function govuln_pass {`
`401`		`- run_for_modules run govulncheck -show verbose`
	`401`	`+ local version`
	`402`	`+ version=$(cd tools/mod && go list -m -f '{{.Version}}' golang.org/x/vuln)`
	`403`	`+ run_for_modules run_go_tool "golang.org/x/vuln/cmd/govulncheck@${version}" -show verbose`
`402`	`404`	`}`
`403`	`405`
`404`	`406`	`function govet_pass {`