ci: add configuration (vanus-labs#9)

1. update .golangci
2. add license-checker

.github/codeql.yml

@@ -0,0 +1,62 @@
+
+name: "Code Scanning - Action"
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    #        ┌───────────── minute (0 - 59)
+    #        │  ┌───────────── hour (0 - 23)
+    #        │  │ ┌───────────── day of the month (1 - 31)
+    #        │  │ │ ┌───────────── month (1 - 12 or JAN-DEC)
+    #        │  │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT)
+    #        │  │ │ │ │
+    #        │  │ │ │ │
+    #        │  │ │ │ │
+    #        *  * * * *
+    - cron: '30 1 * * 0'
+
+jobs:
+  CodeQL-Build:
+    # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
+    runs-on: ubuntu-latest
+
+    permissions:
+      # required for all workflows
+      security-events: write
+
+      # only required for workflows in private repositories
+      actions: read
+      contents: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        # Override language selection by uncommenting this and choosing your languages
+        # with:
+        #   languages: go, javascript, csharp, python, cpp, java
+
+      # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below).
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+
+      # ℹ️ Command-line programs to run using the OS shell.
+      # 📚 https://git.io/JvXDl
+
+      # ✏️ If the Autobuild fails above, remove it and uncomment the following
+      #    three lines and modify them (or add more) to build your code if your
+      #    project uses a compiled language
+
+      #- run: |
+      #     make bootstrap
+      #     make release
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2

.github/workflows/golangci-lint.yml

@@ -2,7 +2,6 @@ name: golangci-lint
 on:
   push:
     tags:
-      - v*
     branches:
       - main
   pull_request:
@@ -17,17 +16,17 @@ jobs:
     strategy:
       matrix:
         go-version: [1.17.x]
-        os: [macos-latest]
+        os: [ubuntu-latest]
     name: lint
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/setup-go@v2
       - uses: actions/checkout@v2
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v2
+        uses: golangci/golangci-lint-action@v3.1.0
         with:
           # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
-          version: v1.43
+          version: v1.45
           # Optional: working directory, useful for monorepos
           # working-directory: somedir
 

.github/workflows/license-check.yml

@@ -0,0 +1,23 @@
+name: License checker
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  check-license:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Check License Header
+        uses: apache/skywalking-eyes@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          log: info
+          config: .github/workflows/licenserc.yml
+          mode: fix

.github/workflows/licenserc.yml

@@ -0,0 +1,29 @@
+header:
+  license:
+    spdx-id: Apache-2.0
+    copyright-owner: Linkall Inc.
+
+  paths-ignore:
+    - 'build/'
+    - '.github/'
+    - 'docs/'
+    - 'config/'
+    - '.gitignore'
+    - '.gitattributes'
+    - '.golangci.yml'
+    - '.golangci_br.yml'
+    - '**/*.yaml'
+    - 'LICENSES'
+    - '**/*.md'
+    - '**/*.json'
+    - '**/*.test'
+    - '**/*.result'
+    - '**/*.example'
+    - '.codecov.yml'
+    - '**/go.mod'
+    - '**/go.sum'
+    - 'LICENSE'
+    - '**/*mock*'
+    - '**/*.sh'
+    - 'Makefile'
+  comment: on-failure