[Maintenance] Require vulncheck in the pipeline (#1407)

Author: ajanikow

.travis.yml

@@ -4,8 +4,7 @@ git:
   depth: false
 
 go:
-  - "1.19"
-  - "1.20"
+  - "1.20.8"
 
 go_import_path: github.com/arangodb/kube-arangodb
 
@@ -17,7 +16,7 @@ script:
     set -e
     if [ "$TRAVIS_PULL_REQUEST" != "false" ] || [ ! -z "$ALWAYS" ]; then
       make init
-      make license-verify license-range-verify fmt-verify linter
+      make license-verify license-range-verify fmt-verify linter vulncheck
       make run-unit-tests
       make bin
     else

Makefile

@@ -286,9 +286,13 @@ linter:
 linter-fix:
 	@$(GOPATH)/bin/golangci-lint run --fix --build-tags "$(GOBUILDTAGS)" $(foreach LINT_EXCLUDE,$(LINT_EXCLUDES),--exclude '$(LINT_EXCLUDE)') ./...
 
-.PHONY: vulncheck
+.PHONY: vulncheck vulncheck-optional
 vulncheck:
-	@echo ">> Checking for known vulnerabilities"
+	@echo ">> Checking for known vulnerabilities (required)"
+	@$(GOPATH)/bin/govulncheck --tags $(GOBUILDTAGS) ./...
+
+vulncheck-optional:
+	@echo ">> Checking for known vulnerabilities (optional)"
 	@-$(GOPATH)/bin/govulncheck --tags $(GOBUILDTAGS) ./...
 
 .PHONY: build
@@ -684,7 +688,7 @@ check-community:
 	@$(MAKE) _check RELEASE_MODE=community
 
 _check: sync-crds
-	@$(MAKE) fmt yamlfmt license-verify linter run-unit-tests bin vulncheck
+	@$(MAKE) fmt yamlfmt license-verify linter run-unit-tests bin vulncheck-optional
 
 generate: generate-internal generate-proto fmt