automation: prevent usage of untagged releases of govulncheck

Fix the "human comment" of this dependency, otherwise renovatebot will fail to parse it, ignore it and will just start consuming untagged versions of the GHA. Signed-off-by: Flavio Castelli <[email protected]>
kubewarden · Oct 1, 2024 · 4ff2748 · 4ff2748
1 parent 996a851
commit 4ff2748
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
@@ -1,7 +1,7 @@
 name: govulncheck
 on:
   push:
-     paths:
+    paths:
       - go.sum
   schedule:
     - cron: "0 0 * * *"
@@ -16,6 +16,6 @@ jobs:
         with:
           go-version: "1.23"
       - name: govulncheck
-        uses: golang/govulncheck-action@dd0578b371c987f96d1185abb54344b44352bd58 # pin@1.0.3
+        uses: golang/govulncheck-action@dd0578b371c987f96d1185abb54344b44352bd58 # v1.0.3
         with:
-          go-package: ./...
+          go-package: ./...