Add GolangCI linter and Go unit tests.

.github/workflows/testing.yaml

@@ -0,0 +1,26 @@
+name: Go unit tests
+
+on: [push, workflow_dispatch]
+
+permissions:
+ checks: write
+ contents: read
+
+jobs:
+ run-tests:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Clone repository
+ uses: actions/checkout@v4
+ with:
+ fetch-depth: 0
+ - name: Set up Go
+ uses: actions/setup-go@v5
+ with:
+ go-version-file: go.mod
+ - name: Run GolangCI-Lint
+ uses: golangci/golangci-lint-action@v6
+ with:
+ version: v1.60
+ - name: Test application
+ run: go test -short -v ./...

.golangci.yaml

@@ -0,0 +1,115 @@
+run:
+ tests: false
+ concurrency: 5
+ timeout: 3m
+
+linters:
+ disable-all: true
+ enable:
+ - gosimple
+ - govet
+ - ineffassign
+ - staticcheck
+ - unused
+ - asasalint
+ - asciicheck
+ - bidichk
+ - bodyclose
+ - contextcheck
+ - decorder
+ - dogsled
+ - dupl
+ - dupword
+ - durationcheck
+ - errchkjson
+ - errname
+ - errorlint
+ - exhaustive
+ - copyloopvar
+ - forcetypeassert
+ - ginkgolinter
+ - gocheckcompilerdirectives
+ - gochecksumtype
+ - gocritic
+ - gocyclo
+ - gofmt
+ - gofumpt
+ - goheader
+ - goimports
+ - gomodguard
+ - goprintffuncname
+ - gosec
+ - gosmopolitan
+ - grouper
+ - importas
+ - inamedparam
+ - interfacebloat
+ - ireturn
+ - loggercheck
+ - makezero
+ - mirror
+ - misspell
+ - musttag
+ - nakedret
+ - nilerr
+ - nilnil
+ - noctx
+ - nolintlint
+ - nonamedreturns
+ - nosprintfhostport
+ - paralleltest
+ - perfsprint
+ - prealloc
+ - predeclared
+ - promlinter
+ - protogetter
+ - reassign
+ - revive
+ - rowserrcheck
+ - sloglint
+ - spancheck
+ - sqlclosecheck
+ - stylecheck
+ - tenv
+ - testableexamples
+ - testifylint
+ - testpackage
+ - thelper
+ - tparallel
+ - unconvert
+ - unparam
+ - usestdlibvars
+ - wastedassign
+ - whitespace
+ - wrapcheck
+ - zerologlint
+
+linters-settings:
+ perfsprint:
+ int-conversion: false
+ err-error: false
+ errorf: true
+ sprintf1: true
+ strconcat: false
+
+ ireturn:
+ allow:
+ - ssh.PublicKey
+ - tea.Model
+ - error
+
+ gosec:
+ confidence: medium
+ excludes:
+ - G107 # Potential HTTP request made with variable url: these are often false positives or intentional
+ - G110 # Decompression bombs: we can check these manually when submitting code
+ - G306 # Poor file permissions used when creating a directory: we can check these manually when submitting code
+ - G404 # Use of weak random number generator (math/rand instead of crypto/rand): we can live with these
+
+ stylecheck:
+ checks:
+ - "all"
+ - "-ST1003" # this is covered by a different linter
+
+ gocyclo:
+ min-complexity: 60