test.yaml

name: Test

on:
  push:
    branches:
      - master
  pull_request:

jobs:
  test:
    name: Run tests
    strategy:
      fail-fast: false
      matrix:
        # https://github.com/actions/go-versions/blob/main/versions-manifest.json
        go-version: [1.22.x, 1.23.x]
        os: [ubuntu-latest, macos-latest, windows-latest]
    runs-on: ${{ matrix.os }}
    steps:
      - name: Install Go
        uses: actions/setup-go@v5
        with:
          go-version: ${{ matrix.go-version }}
          stable: false
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Run tests
        run: make test
        env:
          BOT_GITHUB_ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  test-extended:
    name: Run race+coverage tests
    runs-on: "ubuntu-latest"
    steps:
      - name: Install Go
        uses: actions/setup-go@v5
        with:
          go-version: stable
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Build binary
        run: make build/slack-bot
      - name: Run tests with race
        run: make test-race
        env:
          BOT_GITHUB_ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Test with coverage
        run: make test-coverage
        env:
          BOT_GITHUB_ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Upload Coverage
        uses: codecov/codecov-action@v4
  lint:
    name: Lint
    if: ${{ github.event_name == 'pull_request' }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v6.1.1
        with:
          only-new-issues: true
          args: --timeout=3m
  security:
    name: Security
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run Gosec Security Scanner
        uses: securego/gosec@master
        with:
          args: -exclude=G404,G307,G104 ./...
      - name: Run govulncheck
        uses: Templum/govulncheck-action@v1
        with:
          package: ./...
  docker:
    name: Build Docker image
    runs-on: ubuntu-latest
    steps:
      - name: Check out the repo
        uses: actions/checkout@v4
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3.7.1
      - name: Build and push
        uses: docker/build-push-action@v6.9.0
        with:
          context: .
          load: true