Skip to content

deps: bump github.com/mattn/go-isatty from 0.0.20 to 0.0.22 (#2) #44

deps: bump github.com/mattn/go-isatty from 0.0.20 to 0.0.22 (#2)

deps: bump github.com/mattn/go-isatty from 0.0.20 to 0.0.22 (#2) #44

Workflow file for this run

name: CI
on:
push:
branches: [main, Main]
pull_request:
permissions:
contents: read
jobs:
test:
name: build / vet / test
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
runs-on: ${{ matrix.os }}
steps:
- name: Check out code
uses: actions/checkout@v5
- name: Set up Go
uses: actions/setup-go@v6
with:
go-version-file: go.mod
check-latest: true
- name: Verify formatting
if: runner.os != 'Windows'
shell: bash
run: |
unformatted=$(gofmt -l .)
if [ -n "$unformatted" ]; then
echo "These files are not gofmt-formatted:"
echo "$unformatted"
exit 1
fi
- name: Build
run: go build ./...
- name: Vet
run: go vet ./...
# Install age so the encryption round-trip tests actually run (they skip
# when age/age-keygen are absent). Best-effort: a package mirror hiccup
# must not fail CI, so these steps are allowed to fail and the tests then
# simply skip the round-trip.
- name: Install age (Linux)
if: runner.os == 'Linux'
continue-on-error: true
run: sudo apt-get update && sudo apt-get install -y age
- name: Install age (macOS)
if: runner.os == 'macOS'
continue-on-error: true
run: brew install age
- name: Install age (Windows)
if: runner.os == 'Windows'
continue-on-error: true
run: choco install age.portable -y
- name: Test
run: go test ./...
govulncheck:
name: govulncheck (known vulnerabilities)
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v5
# The official action pins a govulncheck build compatible with the Go
# toolchain it installs (avoiding the x/tools generics panic that bleeding-
# edge toolchains hit with `go install govulncheck@latest`).
- name: Scan for known vulnerabilities
uses: golang/govulncheck-action@v1
with:
go-version-file: go.mod