deps: bump github.com/mattn/go-isatty from 0.0.20 to 0.0.22 (#2) #44
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main, Main] | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| test: | |
| name: build / vet / test | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, macos-latest, windows-latest] | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v5 | |
| - name: Set up Go | |
| uses: actions/setup-go@v6 | |
| with: | |
| go-version-file: go.mod | |
| check-latest: true | |
| - name: Verify formatting | |
| if: runner.os != 'Windows' | |
| shell: bash | |
| run: | | |
| unformatted=$(gofmt -l .) | |
| if [ -n "$unformatted" ]; then | |
| echo "These files are not gofmt-formatted:" | |
| echo "$unformatted" | |
| exit 1 | |
| fi | |
| - name: Build | |
| run: go build ./... | |
| - name: Vet | |
| run: go vet ./... | |
| # Install age so the encryption round-trip tests actually run (they skip | |
| # when age/age-keygen are absent). Best-effort: a package mirror hiccup | |
| # must not fail CI, so these steps are allowed to fail and the tests then | |
| # simply skip the round-trip. | |
| - name: Install age (Linux) | |
| if: runner.os == 'Linux' | |
| continue-on-error: true | |
| run: sudo apt-get update && sudo apt-get install -y age | |
| - name: Install age (macOS) | |
| if: runner.os == 'macOS' | |
| continue-on-error: true | |
| run: brew install age | |
| - name: Install age (Windows) | |
| if: runner.os == 'Windows' | |
| continue-on-error: true | |
| run: choco install age.portable -y | |
| - name: Test | |
| run: go test ./... | |
| govulncheck: | |
| name: govulncheck (known vulnerabilities) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out code | |
| uses: actions/checkout@v5 | |
| # The official action pins a govulncheck build compatible with the Go | |
| # toolchain it installs (avoiding the x/tools generics panic that bleeding- | |
| # edge toolchains hit with `go install govulncheck@latest`). | |
| - name: Scan for known vulnerabilities | |
| uses: golang/govulncheck-action@v1 | |
| with: | |
| go-version-file: go.mod |