code-scan.yml

name: Code Scan

on:
  push:
    branches:
      - main
  pull_request:
    branches:
      - main
  schedule:
    # random HH:MM to avoid a load spike on GitHub Actions at 00:00
    - cron: '4 1 * * *'

permissions: {}

jobs:
  Lint:
    permissions:
      contents: read
    uses: bytemare/workflows/.github/workflows/golangci-lint.yml@f572ea606a74fe011e68a23c19f8d4f5daf58488
    with:
      config-path: ./.github/.golangci.yml
      scope: ./...

  Analyze:
    permissions:
      contents: read
    uses: bytemare/workflows/.github/workflows/scan-go.yml@f572ea606a74fe011e68a23c19f8d4f5daf58488
    with:
      sonar-configuration: .github/sonar-project.properties
      coverage-output-file: coverage.out
    secrets:
      github: ${{ secrets.GITHUB_TOKEN }}
      sonar: ${{ secrets.SONAR_TOKEN }}
      codecov: ${{ secrets.CODECOV_TOKEN }}
      semgrep: ${{ secrets.SEMGREP_APP_TOKEN }}