stackit-cli/golang-ci.yaml at main · stackitcloud/stackit-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
version: "2"
run:
  concurrency: 4
linters:
  enable:
    - bodyclose
    - depguard
    - errorlint
    - forcetypeassert
    - gochecknoinits
    - gocritic
    - gosec
    - misspell
    - nakedret
    - revive
    - sqlclosecheck
    - wastedassign
  disable:
    - noctx # false positive: finds errors with http.NewRequest that dont make sense
    - unparam # false positives
  settings:
    depguard:
      rules:
        main:
          list-mode: lax
          deny:
            - pkg: github.com/stretchr/testify
              desc: Do not use a testing framework
    gocritic:
      disabled-checks:
        - wrapperFunc
        - typeDefFirst
        - ifElseChain
        - dupImport # https://github.com/go-critic/go-critic/issues/845
        - rangeValCopy
      enabled-tags:
        - performance
        - style
        - experimental
    gosec:
      excludes:
      # Suppressions: (see https://github.com/securego/gosec#available-rules for details)
        - G104 # "Audit errors not checked" -> which we don't need and is a badly implemented version of errcheck
        - G102 # "Bind to all interfaces" -> since this is normal in k8s
        - G304 # "File path provided as taint input" -> too many false positives
        - G307 # "Deferring unsafe method "Close" on type "io.ReadCloser" -> false positive when calling defer resp.Body.Close()
    misspell:
      # Correct spellings using locale preferences for US or UK.
      # Default is to use a neutral variety of English.
      # Setting locale to US will correct the British spelling of 'colour' to 'color'.
      locale: US
    nakedret:
      max-func-lines: 0
    revive:
      severity: error
      # https://github.com/mgechev/revive
      rules:
        - name: errorf
        - name: context-as-argument
        - name: error-return
        - name: increment-decrement
        - name: indent-error-flow
        - name: superfluous-else
        - name: unused-parameter
        - name: unreachable-code
        - name: atomic
        - name: empty-lines
        - name: early-return
  exclusions:
    generated: lax
    paths:
      - third_party$
      - builtin$
      - examples$
formatters:
  enable:
    - gofmt
    - goimports
  settings:
    goimports:
      # put imports beginning with prefix after 3rd-party packages;
      # it's a comma-separated list of prefixes
      local-prefixes: github.com/stackitcloud/stackit-cli
  exclusions:
    generated: lax
    paths:
      - third_party$
      - builtin$
      - examples$