go.yml

name: Go

on:
  push:
    branches: [master]
    tags: ['v*']
  pull_request:
    branches: ['*']

permissions:
  contents: read

jobs:

  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        go: ["1.22.x", "1.23.x"]
        include:
        - go: 1.23.x

    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Setup Go
      uses: actions/setup-go@v5
      with:
        go-version: ${{ matrix.go }}
        cache-dependency-path: '**/go.sum'

    - name: Download Dependencies
      run: |
        go mod download
        (cd tools && go mod download)
        (cd benchmarks && go mod download)
        (cd zapgrpc/internal/test && go mod download)

    - name: Test
      run: make cover

    - name: Upload coverage to codecov.io
      uses: codecov/codecov-action@v4
      with:
        verbose: true
        token: ${{ secrets.CODECOV_TOKEN }}

  lint:
    name: Lint
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4
      name: Check out repository
    - uses: actions/setup-go@v5
      name: Set up Go
      with:
        go-version: 1.23.x
        cache: false  # managed by golangci-lint

    - uses: golangci/golangci-lint-action@v6
      name: Install golangci-lint
      with:
        version: latest
        # Hack: Use the official action to download, but not run.
        # make lint below will handle actually running the linter.
        args: --help

    - run: make lint
      name: Lint

    - name: vulncheck
      run: make vulncheck