Repository navigation

refactor(complexity): merge single-export subcommand files into calle… #482

	# .github/workflows/lint.yml
	name: lint-and-security

	on:
	push:
	branches: [main]
	pull_request:

	permissions:
	contents: read

	concurrency:
	group: lint-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	golangci:
	name: golangci-lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	cache: true
	- name: golangci-lint
	uses: golangci/golangci-lint-action@v8
	with:
	version: v2.5.0
	install-mode: goinstall
	args: --timeout=5m

	govulncheck:
	name: govulncheck
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	cache: true
	- name: Install govulncheck
	run: go install golang.org/x/vuln/cmd/govulncheck@latest
	- name: Run govulncheck
	run: govulncheck ./...

	gosec-sarif:
	name: gosec (SARIF upload)
	runs-on: ubuntu-latest
	permissions:
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@v4
	- name: Run gosec
	uses: securego/gosec@v2.22.2
	with:
	args: "-no-fail -fmt sarif -out gosec.sarif ./..."
	- name: Upload SARIF
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: gosec.sarif