Test govulncheck locally

config/jobs/kubernetes/sig-security/govulncheck-presubmit.yaml

@@ -0,0 +1,32 @@
+presubmits:
+  ArkaSaha30/kubernetes:
+  - name: check-govulncheck-results
+    decorate: true
+    decoration_config:
+      timeout: 15m
+    branches:
+    - govulncheck-script
+    path_alias: k8s.io/kubernetes
+    always_run: false
+    optional: true
+    run_if_changed: '^(go.mod|go.sum|vendor)'
+    spec:
+      containers:
+      - image: golang
+        command:
+        - /bin/bash
+        args:
+        - -c
+        - |
+          ./hack/verify-govulncheck.sh
+        resources:
+          limits:
+            cpu: 2
+            memory: 4Gi
+          requests:
+            cpu: 2
+            memory: 4Gi
+    annotations:
+      testgrid-create-test-group: "true"
+      testgrid-dashboards: sig-security-govulncheck-presubmit
+      description: Runs `govulncheck` for PRs related to go module changes

config/testgrids/kubernetes/sig-security/config.yaml

@@ -6,10 +6,12 @@ dashboard_groups:
   - sig-security-cvelist-public
   - sig-security-snyk-scan
   - sig-security-cve-feed
+  - sig-security-govulncheck-presubmit
 
 # Dashboards
 #
 dashboards:
 - name: sig-security-cvelist-public
 - name: sig-security-snyk-scan
 - name: sig-security-cve-feed
+- name: sig-security-govulncheck-presubmit

prow/pj-on-kind.sh

@@ -46,9 +46,9 @@ function parseArgs() {
   job="${1:-}"
   config="${CONFIG_PATH:-}"
   job_config_path="${JOB_CONFIG_PATH:-}"
-  out_dir="${OUT_DIR:-/mnt/disks/prowjob-out}"
+  out_dir="${OUT_DIR:-/Users/arkas1/Documents/mnt/disks/prowjob-out}"
   kind_config="${KIND_CONFIG:-}"
-  node_dir="${NODE_DIR:-/mnt/disks/kind-node}"  # Any pod hostPath mounts should be under this dir to reach the true host via the kind node.
+  node_dir="${NODE_DIR:-/Users/arkas1/Documents/mnt/disks/kind-node}"  # Any pod hostPath mounts should be under this dir to reach the true host via the kind node.
 
   local new_only="  (Only used when creating a new kind cluster.)"
   echo "job=${job}"

temp-mkpod-kind-config.yaml

@@ -0,0 +1,9 @@
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+nodes:
+  - extraMounts:
+      - containerPath: /Users/arkas1/Documents/mnt/disks/prowjob-out
+        hostPath: /Users/arkas1/Documents/mnt/disks/prowjob-out
+      # host <-> node mount for hostPath volumes in Pods. (All hostPaths should be under /Users/arkas1/Documents/mnt/disks/kind-node to reach the host.)
+      - containerPath: /Users/arkas1/Documents/mnt/disks/kind-node
+        hostPath: /Users/arkas1/Documents/mnt/disks/kind-node