lint.yaml

name: lint
on:
  pull_request:
    paths-ignore:
      - 'vendor/*'
    branches:
      - main
      - release-*

# cancel the in-progress workflow when PR is refreshed.
concurrency:
  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  codespell:
    name: codespell
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1
      - name: codespell
        uses: codespell-project/actions-codespell@master
        with:
          skip: .git,*.sum,vendor
          ignore_words_list: AfterAll,NotIn,notin,immediatedly
          check_filenames: true
          check_hidden: true
  misspell:
    name: misspell
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1
      - name: misspell
        uses: reviewdog/action-misspell@v1
        with:
          exclude: ./vendor/*

  golangci:
    name: golangci-lint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1
      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v6
        with:
          # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
          version: v1.55

          # Optional: golangci-lint command line arguments.
          args: --config=.golangci.yml

          # actions/setup-go already handles caching
          skip-cache: true

  govulncheck:
    name: govulncheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1
      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
          check-latest: true
      - name: govulncheck
        uses: golang/govulncheck-action@v1

  markdownlint:
    name: markdownlint
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
      with:
        fetch-depth: 1
    - uses: DavidAnson/markdownlint-cli2-action@v17
      with:
        config: .markdownlint.yaml
        globs: 'docs/*.md'

  shellcheck:
    name: Shellcheck
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - name: Run ShellCheck
      uses: ludeeus/action-shellcheck@master
      with:
        severity: warning
        check_together: 'yes'
        ignore_paths: 'vendor'
        disable_matcher: false
        format: gcc

  modcheck:
    name: modcheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1
      - uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
      - name: run mod check
        run: make mod.check