checks.yml

name: Checks
# Run on push to main and any pull request.
on:
  push:
    branches:
      - main
  pull_request:
permissions:
  checks: write # Allow write access to checks to allow annotation of code in the PR.
  contents: read
  pull-requests: read
env:
  CGO_ENABLED: 0
  GO_VERSION: stable
  GOLANGCI_LINT_VERSION: v1.60.2
  SHELLCHECK_SCRIPTS: ./*.sh
jobs:
  go-lint-checks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: ${{ env.GO_VERSION }}
      - name: Run GolangCI-Lint
        uses: golangci/golangci-lint-action@v6
        with:
          version: ${{ env.GOLANGCI_LINT_VERSION }}
  go-mod-checks:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
          go-version: ${{ env.GO_VERSION }}
      - name: Check if go.mod is tidy
        run: |
          go mod tidy
          git diff --exit-code go.mod go.sum ||
            (echo "::error::go.mod and go.sum need to be tidy" && exit 1)
      - name: Check if vendor directory is up to date
        run: |
          go mod vendor
          git diff --exit-code vendor ||
            (echo "::error::vendor directory needs to be updated" && exit 1)