Skip to content

ci: optimize CI/CD with lint and security scans #13

ci: optimize CI/CD with lint and security scans

ci: optimize CI/CD with lint and security scans #13

Workflow file for this run

name: Test
on:
push:
branches: [ aicode, master, develop ]
pull_request:
branches: [ aicode, master ]
jobs:
lint:
name: Lint
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Go
uses: actions/setup-go@v5
with:
go-version: '1.22'
- name: golangci-lint
uses: golangci/golangci-lint-action@v6
with:
version: latest
# 渐进式:初期不阻塞 CI,后续修复问题后再强制
continue-on-error: true
test:
name: Test with Go ${{ matrix.go-version }}
runs-on: ubuntu-latest
needs: lint
strategy:
matrix:
go-version: ['1.21', '1.22', '1.23']
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Go
uses: actions/setup-go@v5
with:
go-version: ${{ matrix.go-version }}
- name: Cache Go modules
uses: actions/cache@v4
with:
path: ~/go/pkg/mod
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
restore-keys: |
${{ runner.os }}-go-
- name: Download dependencies
run: go mod download
- name: Run go vet
run: go vet ./...
- name: Run tests
run: go test ./... -v -coverprofile=coverage.out
- name: Upload coverage
uses: codecov/codecov-action@v4
if: matrix.go-version == '1.22'
with:
files: ./coverage.out
flags: unittests
fail_ci_if_error: false
- name: Generate coverage report
if: matrix.go-version == '1.22'
run: |
go tool cover -func=coverage.out
echo "## Test Coverage Report" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
go tool cover -func=coverage.out >> $GITHUB_STEP_SUMMARY