chore(ci): add workflow to generate test coverage and report to DeepSource

.github/workflows/main.yml

@@ -0,0 +1,36 @@
+name: run-tests
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          ref: ${{github.event.pull_request.head.sha}}
+
+      - name: Set up Go
+        uses: actions/setup-go@v4
+        with:
+          go-version: 1.23
+
+      - name: Report test coverage results to DeepSource
+        run: |
+          # Run test commands
+            go test ./... -v -race -cover -coverprofile=cover.out -covermode=atomic
+            go tool cover -html=cover.out -o coverage.html
+
+          # Install deepsource CLI
+            curl https://deepsource.io/cli | sh
+
+          # Run the report coverage command from the root directory
+            ./bin/deepsource report --analyzer test-coverage --key go --value-file ./coverage.html
+        env:
+            DEEPSOURCE_DSN: ${{ secrets.DEEPSOURCE_DSN }}
+

checkers/discover/copy.go

@@ -10,7 +10,7 @@ import (
 
 // We use go.mod.embed because embedding is not supported for go.mod files
 //
-//go:embed custom_analyzer_stub/*.go custom_analyzer_stub/go.mod.embed  custom_analyzer_stub/go.sum.embed
+//go:embed custom_analyzer_stub/go.mod.embed  custom_analyzer_stub/go.sum.embed	custom_analyzer_stub/main.go.embed
 var AnalyzerStubs embed.FS
 
 // Copy all the files from the source directory to the destination directory

checkers/discover/generate_test.go

@@ -15,6 +15,7 @@ func TestGenerateAnalyzerRegistry(t *testing.T) {
 
 import (
 	"globstar.dev/analysis"
+	"globstar.dev/customanalyzer/checkers"
 )
 
 var customCheckers []*analysis.Analyzer = []*analysis.Analyzer{}`,
@@ -26,6 +27,7 @@ var customCheckers []*analysis.Analyzer = []*analysis.Analyzer{}`,
 
 import (
 	"globstar.dev/analysis"
+	"globstar.dev/customanalyzer/checkers"
 )
 
 var customCheckers []*analysis.Analyzer = []*analysis.Analyzer{
@@ -37,7 +39,7 @@ var customCheckers []*analysis.Analyzer = []*analysis.Analyzer{
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
 			if got := generateAnalyzerRegistry(tt.goCheckers); got != tt.want {
-				t.Errorf("generateAnalyzerRegistry() = %v, want %v", got, tt.want)
+				t.Errorf("generateAnalyzerRegistry() = \n%v, want \n%v", got, tt.want)
 			}
 		})
 	}

checkers/go/cgi_import.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 package main
 
 import (

checkers/go/des_weak_crypto.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"crypto/des"
 )

checkers/go/fmt_print_in_prod.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 // <expect-error>
 fmt.Print()
 

checkers/go/grpc_client_insecure_tls.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 func unsafe() {
 	// <expect-error> insecure grpc dial
     conn, err := grpc.Dial(address, grpc.WithInsecure())

checkers/go/grpc_server_insecure_tls.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 func unsafe() {
 	// <expect-error> insecure grpc tls server
 	s := grpc.NewServer()

checkers/go/html_req_template_injection.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"fmt"
 	"net/http"

checkers/go/http_file_server.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 package main
 
 import (

checkers/go/insecure_cookie.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 // <expect-error>
 http.SetCookie(&http.Cookie{
     Name: "session",

checkers/go/jwt_harcoded_signing_key.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"fmt"
 	"log"

checkers/go/jwt_none_algorithm.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 package main
 
 import (

checkers/go/math_rand.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 package main
 
 import (

checkers/go/md5_weak_hash.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	// <expect-error> Weak hash function used
 	"crypto/md5"    // UNSAFE: Weak hash function

checkers/go/missing_error_file_open.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"fmt"
 	"os"

checkers/go/mysql_conn_raw_passwd.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"database/sql"
 	"fmt"

checkers/go/net_bind_all_interfaces.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 func bind_all() {
 	// <expect-error> Bind to all interfaces
 	l, err := net.Listen("tcp", ":2000")

checkers/go/os_create_file_default_permission.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"fmt"
 	"os"

checkers/go/postgres_config_raw_passwd.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"fmt"
 	"os"

checkers/go/postgres_conn_raw_passwd.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"database/sql"
 	"fmt"

checkers/go/pprof_endpoint_automatic_exposure.test.go

@@ -1,3 +1,4 @@
+//go:build exclude
 
 import (
 	"fmt"

checkers/go/reflect_pkg.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"fmt"
 

checkers/go/samesite_cookie.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"fmt"
 	"net/http"

checkers/go/sha1_weak_hash.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 package main
 
 import (

checkers/go/tls_config_minver.test.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 import (
 	"crypto/tls"
 	"fmt"

checkers/go/tls_insecure.test.go

@@ -1,3 +1,4 @@
+//go:build exclude
 
 import (
 	"crypto/tls"

checkers/go/unsafe_pkg.test.go

@@ -1,3 +1,4 @@
+//go:build exclude
 
 import (
 	"fmt"