diff --git a/.abf.yml b/.abf.yml
index 0999a13..a56d2fb 100644
--- a/.abf.yml
+++ b/.abf.yml
@@ -1,2 +1,2 @@
 sources:
-  pulumi-3.121.0.tar.gz: a7c68361c49340b8acc37ae971c0c16222b093cd
+  pulumi-3.122.0.tar.gz: eefdea2150db188cf7851718bb3235a1c3a16edd
diff --git a/pulumi.spec b/pulumi.spec
index 18b093d..4363aa8 100644
--- a/pulumi.spec
+++ b/pulumi.spec
@@ -1,9 +1,9 @@
 %define		debug %nil
 %define		debug_package %nil
-
+%define     secscan 1
 
 Name:		pulumi
-Version:	3.121.0
+Version:	3.122.0
 Release:	1
 Summary:	Modern Infrastructure as Code
 URL:		https://www.pulumi.com
@@ -14,6 +14,11 @@ Group:		Development/Other
 BuildRequires:	go >= 1.16
 BuildRequires:	git-core
 BuildRequires:  upx
+%if %{secscan}
+BuildRequires:  clamav
+BuildRequires:  trivy
+%endif
+
 
 %description
 Pulumi's Infrastructure as Code SDK is the easiest way to
@@ -23,6 +28,11 @@ on any cloud.
 
 %prep
 %setup -q
+%if %{secscan}
+clamscan -ir .
+trivy fs --scanners vuln --format cosign-vuln .
+%endif
+
 
 #-------------------------------------------------------------------------------
 
@@ -115,3 +125,10 @@ install -d %{buildroot}%{_sysconfdir}/bash_completion.d/
 %{_bindir}/%{name}
 %{_sysconfdir}/bash_completion.d/%{name}
 
+%check
+export GOPROXY=direct
+go test ./...
+
+%if %{secscan}
+clamscan -ir %{buildroot}
+%endif
\ No newline at end of file