Changelog

• d63e024 fix: only trigger Docker workflow on semantic version tags

Changelog

• eb60d84 fix: add go mod download step and improve error message for package loading errors

go-vuln-gate v1.0.0

Filter govulncheck results by CVSS score threshold for your CI/CD pipeline.

Features

• 🛡️ CVSS Score Filtering - Only fail on vulnerabilities meeting your severity threshold
• 📊 Multiple CVSS Versions - Support for CVSS v2, v3, and v4
• 🎯 Called Code Only - By default, only checks vulnerabilities in code paths actually called
• 📝 Multiple Output Formats - Text, JSON, and SARIF support
• ⏰ Age Filtering - Optionally filter by vulnerability publication date
• 🔑 NVD API Support - Faster lookups with optional API key

Usage

As GitHub Action

- uses: anies1212/go-vuln-gate@v1
  with:
    cvss-threshold: '7.0'
    nvd-api-key: ${{ secrets.NVD_API_KEY }}

As CLI

go install github.com/anies1212/go-vuln-gate/cmd/go-vuln-gate@v1.0.0
go-vuln-gate --threshold 7.0 ./...

Full Documentation

See README.md for complete documentation.