diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..5704144 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1 @@ +* @actions/actions-cache \ No newline at end of file diff --git a/.github/workflows/code-ql.yml b/.github/workflows/code-ql.yml new file mode 100644 index 0000000..7aaba00 --- /dev/null +++ b/.github/workflows/code-ql.yml @@ -0,0 +1,32 @@ +name: Code Scanning + +on: + push: + branches: [main] + pull_request: + paths-ignore: + - '**/*.md' + schedule: + - cron: "0 0 * * 0" + +permissions: + actions: read # for github/codeql-action/init to get workflow details + contents: read # for actions/checkout to fetch code + security-events: write # for github/codeql-action/analyze to upload SARIF results + +jobs: + CodeQL-Build: + runs-on: ubuntu-latest + + steps: + - name: Check out code + uses: actions/checkout@v3 + + - name: Initialize CodeQL + uses: github/codeql-action/init@v2 + with: + languages: go + queries: security-and-quality + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@v2 \ No newline at end of file diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml new file mode 100644 index 0000000..6206cf5 --- /dev/null +++ b/.github/workflows/lint.yml @@ -0,0 +1,21 @@ +name: golangci-lint +on: + push: + branches: + - main + pull_request: +permissions: + contents: read + # Optional: allow read access to pull request. Use with `only-new-issues` option. + # pull-requests: read +jobs: + golangci: + name: lint + runs-on: ubuntu-latest + steps: + - uses: actions/setup-go@v3 + with: + go-version: 1.16 + - uses: actions/checkout@v3 + - name: golangci-lint + uses: golangci/golangci-lint-action@v3 \ No newline at end of file