ci: run golangci-lint on filtered package set

Author: bvt123

.github/workflows/security.yml

@@ -28,13 +28,19 @@ jobs:
       - name: Generate
         run: go generate ./...
 
+      - name: Install golangci-lint
+        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1
+
       - name: Run SAST (golangci-lint)
-        uses: golangci/golangci-lint-action@v8
-        with:
-          version: "latest"
-          only-new-issues: true
-          args: --timeout=10m
-          skip-cache: true
+        shell: bash
+        run: |
+          set -euo pipefail
+          PACKAGES=$(go list ./... 2>/dev/null | grep -Ev '^github.com/transferia/transferia/pkg/providers/logbroker|^github.com/transferia/transferia/pkg/providers/yds|^github.com/transferia/transferia/pkg/util/queues/lbyds' || true)
+          if [ -z "$PACKAGES" ]; then
+            echo "No packages selected for golangci-lint"
+            exit 1
+          fi
+          golangci-lint run --timeout=10m $PACKAGES
 
       - name: Get enabled linters as a table
         id: get_linters

go.sum

@@ -1722,6 +1722,8 @@ github.com/jhump/protoreflect v1.14.1/go.mod h1:JytZfP5d0r8pVNLZvai7U/MCuTWITgrI
 github.com/jhump/protoreflect v1.17.0 h1:qOEr613fac2lOuTgWN4tPAtLL7fUSbuJL5X5XumQh94=
 github.com/jhump/protoreflect v1.17.0/go.mod h1:h9+vUUL38jiBzck8ck+6G/aeMX8Z4QUY/NiJPwPNi+8=
 github.com/jmespath/go-jmespath v0.0.0-20160803190731-bd40a432e4c7/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
+github.com/jmespath/go-jmespath v0.3.0 h1:OS12ieG61fsCg5+qLJ+SsW9NicxNkg3b25OyT2yCeUc=
+github.com/jmespath/go-jmespath v0.3.0/go.mod h1:9QtRXoHjLGCJ5IBSaohpXITPlowMeeYCZ7fLUTSywik=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
 github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
 github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8=