ci.yml RawHistoryFolder

1name: CI
2
3on:
4  push:
5    branches: [main]
6  pull_request:
7
8env:
9  # Test the module alone, with the versions in go.mod (never a go.work).
10  GOWORK: "off"
11
12jobs:
13  lint:
14    name: Lint
15    runs-on: ubuntu-latest
16    steps:
17      - uses: actions/checkout@v6
18      - uses: actions/setup-go@v5
19        with:
20          go-version-file: go.mod
21          cache: true
22      - uses: golangci/golangci-lint-action@v9
23        with:
24          version: v2.14.0
25
26  test:
27    name: Test
28    runs-on: ubuntu-latest
29    steps:
30      - uses: actions/checkout@v6
31      - uses: actions/setup-go@v5
32        with:
33          go-version-file: go.mod
34          cache: true
35      - name: Verify tidy
36        run: |
37          go mod tidy
38          git diff --exit-code -- go.mod go.sum
39      - run: go vet ./...
40      - name: Static build
41        # The runner binary is attached read-only to every sandbox, which has no
42        # libc of ours: it must be a static executable (sandbox.CheckStatic
43        # refuses anything else at start).
44        run: |
45          CGO_ENABLED=0 go build -trimpath -o /tmp/ermite-runner .
46          file /tmp/ermite-runner | grep -q 'statically linked'
47      - name: Protobuf lint and drift
48        # buf and protoc-gen-go are pinned as `tool` directives in go.mod: the
49        # generated code is reproducible and must match the committed one.
50        run: |
51          go tool buf lint
52          go generate ./internal/execstream
53          git diff --exit-code -- internal/execstream/execpb
54      - run: go test -race ./...