reviewdog.yaml

name: reviewdog
on:
  pull_request:
    types: [opened, synchronize, reopened]
permissions:
  contents: read

jobs:
  reviewdog:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
        - name: Checkout code
          uses: actions/checkout@v3
          with:
            ref: ${{ github.event.pull_request.head.sha }}
        - name: Install go
          uses: actions/setup-go@v4
          with:
            go-version: '1.21'
        - name: Install golangci-lint
          run: |
            mkdir -p ./bin
            sudo curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b ./bin v1.51.2
        - name: Install shellcheck
          run: |
            sudo apt install shellcheck
        - name: Install bandit
          run: |
            pip install bandit && bandit --version
        - name: Install pep8
          run: |
              sudo apt install pep8
        - name: Install hadolint
          env:
            HADOLINT_VERSION: v1.16.3
          run: |
            wget -q https://github.com/hadolint/hadolint/releases/download/$HADOLINT_VERSION/hadolint-Linux-x86_64 -O ./bin/hadolint \
            && chmod +x ./bin/hadolint
        - name: Install reviewdog
          run: |
            curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s
        - name: Run Reviewdog
          env:
            REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
            REVIEWDOG_FAIL_ON_ERROR: 'true'
          run: |
            mkdir -p "$PWD"/scan_results
            ./bin/reviewdog -conf .github/.reviewdogConfig.yml -reporter=github-pr-check
        - uses: actions/upload-artifact@v3
          with:
            name: scan_results
            path: ${{ github.workspace }}/scan_results/