s1d3sw1ped_bot
19497eba0c
setup-go@main plus go-version-file 1.26.0 was flaky (version: not found) and still scanned an unpatched 1.26.0 stdlib.
36 lines
910 B
YAML
36 lines
910 B
YAML
name: CI
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
check-and-test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: '1.26.7'
|
|
- run: go mod tidy
|
|
- run: go build ./...
|
|
- run: go vet ./...
|
|
- name: golangci-lint
|
|
uses: golangci/golangci-lint-action@v4
|
|
with:
|
|
version: latest
|
|
args: --timeout=5m
|
|
- run: go test -race -v -shuffle=on -coverprofile=coverage.out -timeout=5m ./...
|
|
- run: go tool cover -func=coverage.out | tail -10 # basic coverage report
|
|
|
|
vulncheck:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version: '1.26.7'
|
|
- run: GOTOOLCHAIN=auto go install golang.org/x/vuln/cmd/govulncheck@latest
|
|
- run: govulncheck ./...
|