---
name: "Lint"
on:
    push:
        branches:
            - "!dependabot/*"
            - "master"
    pull_request:
        branches: [ "*" ]
jobs:
    go-lint:
        name: "Lint Go"
        runs-on: "ubuntu-latest"
        steps:
            -   uses: "actions/checkout@v4"
            -   uses: "actions/setup-go@v5"
                with:
                    go-version-file: go.mod
            -   uses: "authzed/actions/gofumpt@main"
            -   uses: "authzed/actions/go-mod-tidy@main"
            -   uses: "authzed/actions/go-generate@main"

    go-lint-ci:
        name: "Lint CI"
        runs-on: "ubuntu-latest"
        steps:
            -   uses: "actions/checkout@v4"
            -   uses: "actions/setup-go@v5"
                with:
                    go-version-file: go.mod
            -   uses: "golangci/golangci-lint-action@v8"
                with:
                    version: "latest"
    
    codeql:
        name: "Analyze with CodeQL"
        runs-on: "ubuntu-latest"
        permissions:
            actions: "read"
            contents: "read"
            security-events: "write"
        strategy:
            fail-fast: false
            matrix:
                language: [ "go" ]
        steps:
            -   uses: "actions/checkout@v4"
            -   uses: "actions/setup-go@v5"
                with:
                    go-version-file: go.mod
            -   uses: "authzed/actions/codeql@main"