pr-lint.yaml

name: "Lint Pull Request"
on: # yamllint disable-line rule:truthy
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
    branches:
      - main
      - "releases/**"
    paths:
      - "!**/vendor/**"
      - "**.go"
      - "**go.mod"
      - "**go.sum"
      - ".github/actions/**/*"
      - ".github/workflows/pr-*"
      - "!**/vendor/**"
      - docs/**

# yamllint disable rule:line-length
jobs:
  pr-lint:
    name: "Lint Pull Request"
    if: github.event_name != 'pull_request' || !github.event.pull_request.draft
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/sovereigncloudstack/cspo-builder:0.1.3
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.github_token }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
        with:
          ref: ${{ github.event.pull_request.head.sha }}

      - uses: ./.github/actions/setup-go

      - name: Fixup git permissions
        # https://github.com/actions/checkout/issues/766
        shell: bash
        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"

      - name: Verify Golang Modules
        run: make BUILD_IN_CONTAINER=false generate-modules-ci

      - name: Verify Release
        run: make BUILD_IN_CONTAINER=false test-release

      - name: Link Checker
        env:
          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
        run: make BUILD_IN_CONTAINER=false lint-links

      - name: Lint YAML
        run: make BUILD_IN_CONTAINER=false lint-yaml-ci

      - name: Lint Dockerfile
        run: make BUILD_IN_CONTAINER=false lint-dockerfile

      - name: Lint Golang Code
        run: make BUILD_IN_CONTAINER=false lint-golang-ci