sneak/secret
1
0
Fork 0
Code Issues 16 Pull Requests 6 Actions 67 Packages Projects Releases Wiki Activity

Run golangci-lint only in docker, on every run (closes #55)
check / check (push) Waiting to run
Details

Browse Source 
script/lint builds the new Dockerfile.lint, where golangci-lint runs as
a build step. The lint stage is rebuilt on every run, so an unchanged
tree is linted too; the module download stays cached. script/bootstrap
no longer installs golangci-lint. The Dockerfile lint stage calls
golangci-lint directly, since make lint now starts a docker build.
golangci-lint config verify is not run: it fetches its schema live over
unpinned HTTPS.

Model: opus-5-5
This commit was merged in pull request #79.
This commit is contained in:
clawbot
2026-10-04 07:07:52 +02:00
parent 641d5659ec
commit 4e562f834f
6 changed files with 49 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile.lint
+19
View File
@@ -0,0 +1,19 @@
# Lint image, built by script/lint: golangci-lint runs as a build step, so a
# successful build is a clean lint. Works where the docker daemon is remote
# and bind mounts are impossible.
# golangci/golangci-lint:v2.12.2 (Debian-based), 2026-08-07
FROM golangci/golangci-lint:v2.12.2@sha256:5cceeef04e53efe1470638d4b4b4f5ceefd574955ab3941b2d9a68a8c9ad5240 AS deps
WORKDIR /src
COPY go.mod go.sum ./
RUN go mod download
# script/lint rebuilds this stage on every run, by this name; the module
# download above stays cached.
FROM deps AS lint
COPY . .
RUN golangci-lint run --config .golangci.yml ./...