go.yml

name: Go

on:
  pull_request:
    branches:
    - main
  push:
    branches:
    - main

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
    - name: Set up Go
      uses: actions/setup-go@v3
      with:
        go-version: 1.22.2
        check-latest: true
    - name: Check out code
      uses: actions/checkout@v3
    - name: Build
      run: |
         go build ./kms ./kes
         go vet ./kms ./kes
    - name: Lint
      uses: golangci/golangci-lint-action@v3
      with:
        version: latest
        args: --config ./.golangci.yml ./kms ./kes
  test:
    name: Test ${{ matrix.os }}
    needs: Build
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
    steps:
    - name: Set up Go
      uses: actions/setup-go@v3
      with:
        go-version: 1.22.2
        check-latest: true
    - name: Check out code
      uses: actions/checkout@v3
    - name: Test
      run: | 
        go test ./kms ./kes
  
  vulncheck:
    name: Vulncheck
    needs: Build
    runs-on: ubuntu-latest
    steps:
    - name: Check out code into the Go module directory
      uses: actions/checkout@v3
    - uses: actions/setup-go@v3
      with:
        go-version: 1.22.2
        check-latest: true
    - name: Get govulncheck
      run: go install golang.org/x/vuln/cmd/govulncheck@latest
      shell: bash
    - name: Run govulncheck
      run: |
        govulncheck -C ./kms 
        govulncheck -C ./kes
      shell: bash