#79: added govulncheck for automated vulnerability checks; upgraded b…

…uild to go-1.20.1

.github/workflows/build.yml

@@ -5,40 +5,72 @@ jobs:
     name: run
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-
     - name: install golang
       uses: actions/setup-go@v3
       with:
-        go-version: '1.19.3'
+        go-version: '1.20.1'
+
+    - name: install govulncheck
+      run: go install golang.org/x/vuln/cmd/govulncheck@latest
+
+    - uses: actions/checkout@v3
+
+    - name: run vulnerability check
+      run: govulncheck ./...
 
-    - name: build 
-      run: make cross-platform
+    - name: build Linux amd64
+      run: make nightlight_linux_amd64
 
-    - name: upload linux build
+    - name: test
+      run: make test
+
+    - name: upload Linux amd64 build
       uses: actions/upload-artifact@v3
       with:
         name: dist
         path: nightlight_linux_amd64
 
-    - name: upload osx build
+    - name: build Linux arm7 (Raspberry Pi 32-bit)
+      run: make nightlight_linux_arm7
+
+    - name: upload Linux arm7 (Raspberry Pi 32-bit) build
       uses: actions/upload-artifact@v3
       with:
         name: dist
-        path: nightlight_darwin_amd64
+        path: nightlight_linux_arm7
 
-    - name: upload windows build
+    - name: build Linux arm64 (Raspberry Pi 64-bit)
+      run: make nightlight_linux_arm64
+
+    - name: upload Linux arm64 (Raspberry Pi 64-bit) build
       uses: actions/upload-artifact@v3
       with:
         name: dist
-        path: nightlight_windows_amd64.exe
+        path: nightlight_linux_arm64
 
-    - name: upload raspi build
+    - name: build Darwin amd64 (MacOS Intel)
+      run: make nightlight_darwin_amd64
+
+    - name: upload Darwin amd64 (MacOS Intel) build
       uses: actions/upload-artifact@v3
       with:
         name: dist
-        path: nightlight_linux_arm7
+        path: nightlight_darwin_amd64
 
-    - name: test
-      run: make test
+    - name: build Darwin arm64 (MacOS Apple Silicon)
+      run: make nightlight_darwin_arm64
 
+    - name: upload Darwin arm64 (MacOS Apple Silicon) build
+      uses: actions/upload-artifact@v3
+      with:
+        name: dist
+        path: nightlight_darwin_arm64
+
+    - name: build Windows amd64
+      run: make nightlight_windows_amd64
+
+    - name: upload windows build
+      uses: actions/upload-artifact@v3
+      with:
+        name: dist
+        path: nightlight_windows_amd64.exe

.github/workflows/release.yml

@@ -11,16 +11,40 @@ jobs:
     name: run
     runs-on: ubuntu-latest
     steps:
-    - name: checkout 
-      uses: actions/checkout@v3
-
     - name: install golang
       uses: actions/setup-go@v3
       with:
-        go-version: '1.19.3'
+        go-version: '1.20.1'
+
+    - name: install govulncheck
+      run: go install golang.org/x/vuln/cmd/govulncheck@latest
+
+    - name: checkout 
+      uses: actions/checkout@v3
+
+    - name: run vulnerability check
+      run: govulncheck ./...
+
+    - name: build Linux amd64
+      run: make nightlight_linux_amd64
+
+    - name: test
+      run: make test
+
+    - name: build Linux arm7 (Raspberry Pi 32-bit)
+      run: make nightlight_linux_arm7
+
+    - name: build Linux arm64 (Raspberry Pi 64-bit)
+      run: make nightlight_linux_arm64
+
+    - name: build Darwin amd64 (MacOS Intel)
+      run: make nightlight_darwin_amd64
+
+    - name: build Darwin arm64 (MacOS Apple Silicon)
+      run: make nightlight_darwin_arm64
 
-    - name: build
-      run: make cross-platform
+    - name: build Windows amd64
+      run: make nightlight_windows_amd64
 
     - name: zip
       run: |

Makefile

@@ -33,7 +33,7 @@ web/blockly/%:
 $(EXECUTABLE): $(SRCS) $(BLOCKLY) $(WEBSRCS)
 	$(GO) build -o $@ $(FLAGS) ./cmd/$(TARGET)
 
-cross-platform: $(TARGET)_linux_amd64 $(TARGET)_darwin_amd64 $(TARGET)_windows_amd64.exe $(TARGET)_linux_arm7 $(TARGET)_linux_arm64
+cross-platform: $(TARGET)_linux_amd64 $(TARGET)_linux_arm7 $(TARGET)_linux_arm64 $(TARGET)_darwin_amd64 $(TARGET)_darwin_arm64 $(TARGET)_windows_amd64.exe 
 
 $(TARGET)_%_amd64: $(SRCS) $(BLOCKLY)
 	GOOS=$* GOARCH=amd64 $(GO) build -o $@ $(FLAGS) ./cmd/$(TARGET)
@@ -54,6 +54,9 @@ $(TARGET)_%_arm64: $(SRCS) $(BLOCKLY)
 test:
 	$(GO) test -v ./cmd/$(TARGET) ./internal
 
+vulncheck:
+	govulncheck ./...
+
 clean:
 	rm -f $(EXECUTABLE) $(TARGET)_*_amd64* $(TARGET)_*_amd64.exe