diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml index d5f0898..29e6fd5 100644 --- a/.gitea/workflows/ci.yaml +++ b/.gitea/workflows/ci.yaml @@ -186,12 +186,17 @@ jobs: mkdir -p /opt/hostedtoolcache/node/22.23.1/x64/bin ln -sf /usr/local/bin/node /opt/hostedtoolcache/node/22.23.1/x64/bin/node - - name: Staticcheck + - name: Staticcheck (dev tags) run: | go install honnef.co/go/tools/cmd/staticcheck@latest staticcheck -tags "test,dev" ./... working-directory: backend + - name: Staticcheck (prod tags) + run: | + staticcheck -tags "test,!dev" ./... + working-directory: backend + go-gosec: name: Security scan (gosec) needs: [go-build] @@ -222,12 +227,17 @@ jobs: mkdir -p /opt/hostedtoolcache/node/22.23.1/x64/bin ln -sf /usr/local/bin/node /opt/hostedtoolcache/node/22.23.1/x64/bin/node - - name: gosec + - name: gosec (dev tags) run: | go install github.com/securego/gosec/v2/cmd/gosec@latest gosec -severity medium -tags "test,dev" ./... working-directory: backend + - name: gosec (prod tags) + run: | + gosec -severity medium -tags "test,!dev" ./... + working-directory: backend + go-mod-tidy: name: go mod tidy needs: [go-build]