ci.yaml

name: CI

on:
  push:
    branches:
    - main
    - "release-[0-9]+.[0-9]+*"

  pull_request:

jobs:
  test:
    name: Test
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
    
      - name: Set up Go 
        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
        with:
          go-version-file: '.go-version'

      - name: Check diff
        run: make check-diff

      - name: Test
        run: make test
    
  lint: 
    name: Lint
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
    
      - name: Set up Go
        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
        with:
          go-version-file: '.go-version'

      - name: Lint
        run: make lint
        env:
          LINTER_FLAGS: '--timeout 5m'

  license-check:
      name: License check
      runs-on: ubuntu-latest
        
      steps:
        - name: Checkout code
          uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
  
        - name: Set up Go
          uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
          with:
            go-version-file: '.go-version'
  
        - name: Cache licenses
          uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
          with:
            key: licensei-v2-${{ hashFiles('go.sum') }}
            path: |
              .licensei.cache
            restore-keys: |
              licensei-v2
  
        - name: Download license information for dependencies
          env:
            GITHUB_TOKEN: ${{ github.token }}
          run: make license-cache
  
        - name: Check licenses
          env:
            GITHUB_TOKEN: ${{ github.token }}
          run: make license-check
          
  artifacts:
    name: Artifacts
    uses: ./.github/workflows/artifacts.yaml
    with:
      publish: ${{ github.event_name == 'push' }}
    permissions:
      contents: read
      packages: write
      id-token: write
      security-events: write