chore: switch linting to golangci-lint

.github/workflows/ci.yml

@@ -32,5 +32,8 @@ jobs:
       - name: Run tests
         run: go test ./...
 
-      - name: Run vet
-        run: go vet ./...
+      - name: Run golangci-lint
+        uses: golangci/golangci-lint-action@v8
+        with:
+          version: latest
+          args: --config=.golangci.yml

.gitignore

@@ -0,0 +1 @@
+.cache/

.golangci.yml

@@ -0,0 +1,26 @@
+version: "2"
+linters:
+  default: none
+  enable:
+    - errcheck
+    - staticcheck
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  enable:
+    - gofmt
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

README.md

@@ -164,8 +164,9 @@ CI runs on push and pull request via `.github/workflows/ci.yml`.
 Run the same checks locally:
 
 ```bash
-go test ./...
-go vet ./...
+task fmt
+task lint
+task test
 ```
 
 ## Project Docs

Taskfile.yml

@@ -12,15 +12,15 @@ tasks:
     cmds:
       - go test ./...
 
-  vet:
-    desc: Run go vet checks
+  lint:
+    desc: Run golangci-lint checks
     cmds:
-      - go vet ./...
+      - golangci-lint run
 
   fmt:
-    desc: Format Go source files
+    desc: Format Go source files using golangci-lint
     cmds:
-      - go fmt ./...
+      - golangci-lint run --fix --disable-all --enable gofmt
 
   build:
     desc: Build the envault CLI
@@ -30,5 +30,6 @@ tasks:
   ci:
     desc: Run local checks aligned with CI
     cmds:
+      - task: fmt
+      - task: lint
       - task: test
-      - task: vet

docs/features/continuous-integration.md

@@ -20,11 +20,7 @@ Without CI, users and contributors cannot quickly trust that changes preserve be
 - Use supported Go versions.
 - Run:
   - `go test ./...`
-  - `go vet ./...`
-
-Optional follow-ups:
-
-- `golangci-lint`
+  - `golangci-lint run` with `staticcheck` and `errcheck`
 - race tests (`go test -race ./...`)
 - coverage upload/reporting