static code analysis checker for golang. comments back on error to pull request.
Runs gofmt
and comments back on error.
Runs go vet
and comments back on error.
Runs go vet --vettool=/go/bin/shadow
and comments back on error.
Use: golang.org/x/tools/go/analysis/passes/shadow/cmd/shadow
Runs goimports
and comments back on error.
Use: golang.org/x/tools/cmd/goimports
Runs golint
and comments back on error.
Use: golang.org/x/lint/golint
Runs staticcheck
and comments back on error.
Use: honnef.co/go/tools/cmd/staticcheck
Runs errcheck
and comments back on error.
Use: github.com/kisielk/errcheck
Runs gosec
and comments back on error.
Use: github.com/securego/gosec/cmd/gosec
.github/workflows/static.yml
name: static check
on: pull_request
jobs:
imports:
name: Imports
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: check
uses: grandcolline/[email protected]
with:
run: imports
token: ${{ secrets.GITHUB_TOKEN }}
errcheck:
name: Errcheck
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: check
uses: grandcolline/[email protected]
with:
run: errcheck
token: ${{ secrets.GITHUB_TOKEN }}
lint:
name: Lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: check
uses: grandcolline/[email protected]
with:
run: lint
token: ${{ secrets.GITHUB_TOKEN }}
shadow:
name: Shadow
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: check
uses: grandcolline/[email protected]
with:
run: shadow
token: ${{ secrets.GITHUB_TOKEN }}
staticcheck:
name: StaticCheck
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: check
uses: grandcolline/[email protected]
with:
run: staticcheck
token: ${{ secrets.GITHUB_TOKEN }}
sec:
name: Sec
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: check
uses: grandcolline/[email protected]
with:
run: sec
token: ${{ secrets.GITHUB_TOKEN }}
flags: "-exclude=G104"