analysis.yml

---

name: Analysis

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
  schedule:
    - cron: 13 7 * * 6

jobs:
  linting:
    runs-on: ubuntu-latest

    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: golangci-lint
        uses: golangci/golangci-lint-action@0e1fd32b0c0584f0d28eec08848dfd2bf6a909d9
        with:
          version: v1.62.2

      - name: shellcheck
        uses: azohra/shell-linter@6bbeaa868df09c34ddc008e6030cfe89c03394a1
        with:
          path: scripts/test-*
          severity: error

      - name: yaml-lint
        uses: ibiqlik/action-yamllint@v3
        with:
          config_file: .yamllint.yml

  vulnerabilities:
    runs-on: ubuntu-latest

    permissions:
      security-events: write

    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: initialize
        uses: github/codeql-action/init@v3
        with:
          languages: go

      - name: codeql analyze
        uses: github/codeql-action/analyze@v3