Repository navigation

feat(client)!: report why the client could not connect to the engine #635

	name: govulncheck
	on:
	push:
	branches:
	- main
	pull_request:
	jobs:
	check:
	name: Check for known vulnerabilities that affect Go code
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	pull-requests: write
	contents: write
	env:
	# Docker Hub credentials and the Docker Build Cloud builder are only
	# available to same-repo events. Fork PRs run without secrets, so they
	# fall back to a local buildx builder (slower, no shared cache).
	IS_TRUSTED: ${{ github.event_name != 'pull_request' \|\| github.event.pull_request.head.repo.full_name == github.repository }}
	steps:
	- uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Hub login
	if: env.IS_TRUSTED == 'true'
	uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
	with:
	username: dockerpublicbot
	password: ${{ secrets.DOCKERPUBLICBOT_WRITE_PAT }}

	- name: Set up Docker Buildx
	id: buildx
	uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
	with:
	driver: ${{ env.IS_TRUSTED == 'true' && 'cloud' \|\| 'docker-container' }}
	endpoint: ${{ env.IS_TRUSTED == 'true' && 'docker/secrets-engine' \|\| '' }}
	install: true

	- name: govulncheck
	run: make BUILDER=${{ steps.buildx.outputs.name }} govulncheck