Skip to content
This repository was archived by the owner on Jan 12, 2026. It is now read-only.

Pin github workflows to a commit hash instead of version tag for security purpose #5

Pin github workflows to a commit hash instead of version tag for security purpose

Pin github workflows to a commit hash instead of version tag for security purpose #5

Workflow file for this run

# .github/workflows/main.yaml
name: main
on:
push:
branches:
- master
- release/*
pull_request:
branches:
- master
jobs:
test:
runs-on: ubuntu-latest
steps:
- name: Check out code into the Go module directory
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
- name: Setup go
uses: actions/setup-go@19bb51245e9c80abacb2e91cc42b33fa478b8639 # v4
with:
go-version: '1.20.x'
- name: Install staticcheck
run: go install honnef.co/go/tools/cmd/staticcheck@latest
- name: Run staticcheck
run: staticcheck ./...
- name: Install golint
run: go install golang.org/x/lint/golint@latest
- name: Run golint
run: golint ./...
- name: Run Tests
run: go test -cover -p 1 -race -v ./...