Allow custom orgs for running govulncheck jobs

[SgtCoDFish]

Repos outside the cert-manager org might want to use the govulncheck job; this could be other repos depending on makefile-modules, or forks of cert-manager org repos who want to run the job.

By setting govulncheck_generate_org in make/00_mod.mk users of makefile-modules will be able to use a custom org.

This does also change the generate-govulncheck job to only copy the govulncheck workflow file, rather than copying the whole modules/go/base directory, but the govulncheck file was the only one in that repo anyway (and it would be confusing to copy other files in a target called generate-govulncheck)

Testing

I've tested this with a local copy of trust-manager pointing at this branch and it worked as expected. Diff:

diff --git i/.github/workflows/govulncheck.yaml w/.github/workflows/govulncheck.yaml
index 25018fe..7eeeff9 100644
--- i/.github/workflows/govulncheck.yaml
+++ w/.github/workflows/govulncheck.yaml
@@ -17,7 +17,7 @@ jobs:
   govulncheck:
     runs-on: ubuntu-latest
 
-    if: github.repository_owner == 'cert-manager'
+    if: github.repository_owner == 'foobar'
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
diff --git i/make/00_mod.mk w/make/00_mod.mk
index 0da7d33..0024cdd 100644
--- i/make/00_mod.mk
+++ w/make/00_mod.mk
@@ -66,6 +66,8 @@ helm_labels_template_name := trust-manager.labels
 
 golangci_lint_config := .golangci.yaml
 
+govulncheck_generate_org := foobar
+
 define helm_values_mutation_function
 $(YQ) \
 	'( .image.repository = "$(oci_manager_image_name)" ) | \

[inteon]

Similar challenges apply to

makefile-modules/modules/repository-base/base/.github/workflows/make-self-upgrade.yaml

Line 18 in c3d364a

if: github.repository_owner == 'cert-manager'

.

[maelvls]

/lgtm

Thanks for testing this with trust-manager and showing the diff!

[cert-manager-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: maelvls

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [maelvls]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment