Merge pull request #26 from yumafuu/chore/ghalint

[add] ghalint

.github/workflows/ghalint.yaml

@@ -0,0 +1,32 @@
+name: ghalint
+
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+jobs:
+  ghalint:
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        with:
+          fetch-depth: 0
+
+      - uses: aquaproj/aqua-installer@6ce1f8848ec8e61f14d57bd5d7597057a6dd187c # v3.0.1
+        with:
+          aqua_version: v2.28.0
+
+      - name: ghalint
+        run: ghalint run
+        env:
+          GHALINT_LOG_COLOR: always

.github/workflows/golangci.yaml

@@ -15,19 +15,20 @@ on:
 
 jobs:
   golangci-lint:
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version-file: go.mod
           cache: true
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v6.1.0
         with:
           version: v1.59
 

.github/workflows/release.yaml

@@ -7,20 +7,21 @@ on:
 
 jobs:
   release:
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version-file: go.mod
           cache: true
 
-      - uses: goreleaser/goreleaser-action@v6
+      - uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
         with:
           args: release --clean
         env:

.github/workflows/tagpr.yaml

@@ -3,13 +3,18 @@ on:
   push:
     branches: ["main"]
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   tagpr:
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       with:
         token: ${{ secrets.TAP_GITHUB_TOKEN }}
-    - uses: Songmu/tagpr@v1
+    - uses: Songmu/tagpr@0a9b8e6634db66e773516828c1359dc6e9e8b484 # v1.3.0
       env:
         GITHUB_TOKEN: ${{ secrets.TAP_GITHUB_TOKEN }}

.github/workflows/test.yaml

@@ -15,13 +15,14 @@ on:
 
 jobs:
   golangci-lint:
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version-file: go.mod
           cache: true

aqua.yaml

@@ -12,3 +12,6 @@ registries:
 packages:
 - name: goreleaser/[email protected]
 - name: golangci/[email protected]
+- name: suzuki-shunsuke/[email protected]
+- name: suzuki-shunsuke/[email protected]
+- name: suzuki-shunsuke/[email protected]