Add govulncheck (closes #3)

Install govulncheck with go install after the cleanup step, into /usr/local/bin so it survives the /root/go removal, and check it in the smoke test. Model: deepseek-v4-pro
2026-11-05 13:53:53 +00:00
parent 759616e824
commit c857f45ee4
3 changed files with 9 additions and 1 deletions
@@ -22,6 +22,7 @@ docker run --rm "$img" bash -ec '
    COREPACK_ENABLE_NETWORK=0 pnpm --version
    prettier --version
    shellcheck --version
+    govulncheck -version
 '

 echo "== $img: runit service lifecycle"