ci-go.yml

name: ci-go

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

# Declare default permissions as read only.
permissions: read-all

jobs:
  go-build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Source
        uses: actions/checkout@v2

      - uses: actions/setup-go@v5
        with:
          go-version-file: './go.mod'

      - name: Build karmor
        run: make

  go-fmt:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Source
        uses: actions/checkout@v2

      - uses: actions/setup-go@v5
        with:
          go-version-file: './go.mod'

      - name: Check gofmt
        run: make gofmt

  go-sec:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Source
        uses: actions/checkout@v2

      - uses: actions/setup-go@v5
        with:
          go-version-file: './go.mod'

      - name: Run Gosec Security Scanner
        run: make gosec

  go-lint:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Source
        uses: actions/checkout@v2

      - name: Run Revive Action by pulling pre-built imag
        uses: morphy2k/revive-action@v2
        with:
          path: "./..."

  unit-tests:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Source
        uses: actions/checkout@v2

      - uses: actions/setup-go@v5
        with:
          go-version-file: './go.mod'

      - name: Run unit tests
        run: make test