From 718abaf75a427c957a3e380092bd020dec27be76 Mon Sep 17 00:00:00 2001 From: Isabella Siu Date: Mon, 29 Jun 2026 17:03:53 -0400 Subject: [PATCH] ci(create-plugin): add govulncheck to scaffolded plugin CI template Run govulncheck for backend plugins after build and test so new plugins get Go vulnerability scanning by default. Co-authored-by: Cursor --- packages/create-plugin/templates/github/workflows/ci.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/packages/create-plugin/templates/github/workflows/ci.yml b/packages/create-plugin/templates/github/workflows/ci.yml index fff6022b63..368409ba8c 100644 --- a/packages/create-plugin/templates/github/workflows/ci.yml +++ b/packages/create-plugin/templates/github/workflows/ci.yml @@ -87,6 +87,10 @@ jobs: version: latest args: test + - name: Check backend for vulnerabilities + if: steps.check-for-backend.outputs.has-backend == 'true' + run: go run golang.org/x/vuln/cmd/govulncheck@v1.5.0 ./... + - name: Check for E2E id: check-for-e2e run: |