sca.yml

name: static
on:
  push:
    branches: [ '**' ]
  pull_request:
    branches: [ '**' ]
permissions:
  contents: read
jobs:
  shellcheck:
    name: Shellcheck
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: |
          wget -q https://github.com/koalaman/shellcheck/releases/download/stable/shellcheck-stable.linux.x86_64.tar.xz
          tar -xvf shellcheck-stable.linux.x86_64.tar.xz
          shellcheck-stable/shellcheck -V; find . -name '*.sh' -print -exec sha256sum {} \;; find . -type f \( -name "*.sh" \) -print -exec shellcheck-stable/shellcheck -a -s bash -S warning -f gcc {} \;;
        shell: bash
  hadolint:
    runs-on: ubuntu-latest
    name: Hadolint
    steps:
      - uses: actions/checkout@v4
      - run: wget -q https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64 -O hadolint; chmod +x hadolint ; find . -type f \( -name "Dockerfile*" \) -print0 | xargs -n 1 -0 ./hadolint ;
  gofmt-imports:
    runs-on: ubuntu-latest
    name: Go Fmt and Go Import
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version-file: 'go.mod'
      - run:  |
          go install golang.org/x/tools/cmd/goimports@v0.20.0 && goimports -l . && gofmt -l .
        shell: bash
  golangci:
    permissions:
      contents: read
      pull-requests: read
    runs-on: ubuntu-latest
    name: lint
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version-file: 'go.mod'
      - name: golangci-lint
        run: |
          go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.57.2
          make golangci-lint
        shell: bash