test-and-build #54

	---

	name: test-and-build
	on:
	push:
	branches: ['*']
	tags: ['v*']

	schedule:
	# Periodically test against current Go version
	- cron: '23 4 * * 0'

	permissions:
	contents: write

	jobs:
	test-and-build:
	defaults:
	run:
	shell: bash

	container:
	image: luzifer/gh-arch-env
	env:
	CGO_ENABLED: 1
	GOPATH: /go

	runs-on: ubuntu-latest

	steps:
	- name: Install required packages
	run: \|
	pacman -Syy --noconfirm \
	base-devel

	- uses: actions/checkout@v4

	- name: Marking workdir safe
	run: git config --global --add safe.directory /__w/rconfig/rconfig

	- name: Run coverage-tests
	run: \|
	go test -v -race -cover ./...

	- name: Check code for linter errors
	run: \|
	golangci-lint run ./...

	- name: Run Trivy check
	run: \|
	trivy fs . \
	--dependency-tree \
	--exit-code 1 \
	--format table \
	--ignore-unfixed \
	--quiet \
	--scanners license,misconfig,secret,vuln \
	--severity HIGH,CRITICAL

	...

Provide feedback