Skip to content
This repository was archived by the owner on Jun 9, 2026. It is now read-only.

Github Action Pinning #1980

Github Action Pinning

Github Action Pinning #1980

Workflow file for this run

name: lint
on:
push:
branches: [main]
pull_request:
workflow_dispatch:
permissions:
# Required: allow read access to the content for analysis.
contents: read
# Optional: allow read access to pull request. Use with `only-new-issues` option.
pull-requests: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
jobs:
# If adding a new linter: (a) create a new job; and (b) add it to the `needs`
# list of the `lint` job as this is what gates PRs.
lint:
runs-on: ubuntu-latest
needs: [golangci-lint, yamllint, shellcheck, tausecondslint]
steps:
- run: echo "Dependencies successful"
golangci-lint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
with:
go-version-file: "go.mod"
- name: golangci-lint
uses: golangci/golangci-lint-action@9fae48acfc02a90574d7c304a1758ef9895495fa # v7
with:
version: v2.9.0
yamllint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- run: yamllint -c .yamllint.yml .
shellcheck:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- name: Run ShellCheck
uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0
tausecondslint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- name: Check for TauSeconds misuse with time.Add()
run: |
if grep -rn '\.Add([^)]*TauSeconds' --include='*.go' .; then
echo "ERROR: Use params.Tau (time.Duration) with time.Add(), not TauSeconds (int)"
echo "TauSeconds would be interpreted as nanoseconds, not seconds"
exit 1
fi