fleet/.github/workflows/golangci-lint.yml
Guillaume Ross b620d2b7d8
Fix code scanning issues with golangci-lint.yml (#4606)
Making permissions more restricted to reduce impact if token leaked, and pinning dependencies more strictly.
2022-03-15 14:44:30 -04:00

34 lines
876 B
YAML

name: golangci-lint
on:
push:
branches:
- main
- patch-*
paths:
- '**.go'
pull_request:
paths:
- '**.go'
workflow_dispatch: # Manual
permissions:
contents: read
jobs:
golangci:
permissions:
contents: read # for actions/checkout to fetch code
pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
name: lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2
- name: golangci-lint
uses: golangci/golangci-lint-action@5c56cd6c9dc07901af25baab6f2b0d9f3b7c3018 # v2
with:
# Required: the version of golangci-lint is required and must be
# specified without patch version: we always use the latest patch
# version.
version: v1.42
args: --timeout 10m