go-static-checks.yaml

name: Go Static Checks
on: pull_request

permissions:
  contents: read
  pull-requests: read

concurrency:
  group: '${{ github.workflow }} @ ${{ github.ref }}'
  cancel-in-progress: true

jobs:
  frontend:
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

      - name: Use Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "21.1.0"

      - run: |
          cd frontend
          npm ci
          npm run build
          cd -

      - uses: actions/upload-artifact@v3
        with:
          name: frontend
          path: frontend/dist
          if-no-files-found: error
          retention-days: 1

  staticcheck:
    name: StaticCheck
    needs: frontend
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      - name: Set up Go
        uses: actions/setup-go@v4
        with:
          go-version-file: go.mod
      - name: Copy built frontend
        uses: actions/download-artifact@v3
        with:
          name: frontend
          path: frontend/dist
      - run: go generate ./...
      - name: check
        uses: USA-RedDragon/golang-github-actions@v1.2.6
        with:
          run: staticcheck
          token: ${{ secrets.GITHUB_TOKEN }}
        env:
          CGO_ENABLED: "0"

  golangci:
    name: lint
    needs: frontend
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
      - uses: actions/setup-go@v4
        with:
          go-version-file: go.mod
      - name: Copy built frontend
        uses: actions/download-artifact@v3
        with:
          name: frontend
          path: frontend/dist
      - run: go generate ./...
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v3
        with:
          version: latest
          skip-cache: true
          # Show only new issues if it's a pull request. The default value is `false`.
          only-new-issues: true