From 9a96a7a8a1c5c12e72468035598f5c0f7ab552ca Mon Sep 17 00:00:00 2001 From: Stephen Adamson Date: Fri, 10 Jul 2026 09:50:21 +0100 Subject: [PATCH] ci: add prod-tag variants to staticcheck and gosec Both tools now run under test,dev and test,!dev tags, matching go-vet pattern. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus --- .gitea/workflows/ci.yaml | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml index d5f0898..29e6fd5 100644 --- a/.gitea/workflows/ci.yaml +++ b/.gitea/workflows/ci.yaml @@ -186,12 +186,17 @@ jobs: mkdir -p /opt/hostedtoolcache/node/22.23.1/x64/bin ln -sf /usr/local/bin/node /opt/hostedtoolcache/node/22.23.1/x64/bin/node - - name: Staticcheck + - name: Staticcheck (dev tags) run: | go install honnef.co/go/tools/cmd/staticcheck@latest staticcheck -tags "test,dev" ./... working-directory: backend + - name: Staticcheck (prod tags) + run: | + staticcheck -tags "test,!dev" ./... + working-directory: backend + go-gosec: name: Security scan (gosec) needs: [go-build] @@ -222,12 +227,17 @@ jobs: mkdir -p /opt/hostedtoolcache/node/22.23.1/x64/bin ln -sf /usr/local/bin/node /opt/hostedtoolcache/node/22.23.1/x64/bin/node - - name: gosec + - name: gosec (dev tags) run: | go install github.com/securego/gosec/v2/cmd/gosec@latest gosec -severity medium -tags "test,dev" ./... working-directory: backend + - name: gosec (prod tags) + run: | + gosec -severity medium -tags "test,!dev" ./... + working-directory: backend + go-mod-tidy: name: go mod tidy needs: [go-build]