This repository was archived by the owner on Jan 12, 2026. It is now read-only.
Pin github workflows to a commit hash instead of version tag for security purpose #5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # .github/workflows/main.yaml | |
| name: main | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - release/* | |
| pull_request: | |
| branches: | |
| - master | |
| jobs: | |
| test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out code into the Go module directory | |
| uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | |
| - name: Setup go | |
| uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4 | |
| with: | |
| go-version: '1.20.x' | |
| - name: Install staticcheck | |
| run: go install honnef.co/go/tools/cmd/staticcheck@latest | |
| - name: Run staticcheck | |
| run: staticcheck ./... | |
| - name: Install golint | |
| run: go install golang.org/x/lint/golint@latest | |
| - name: Run golint | |
| run: golint ./... | |
| - name: Run Tests | |
| run: go test -cover -p 1 -race -v ./... |