Updating to newer static analysis workflow

Author: andydotxyz

.github/workflows/static_analysis.yml

@@ -1,37 +1,52 @@
 name: Static Analysis
 on: [push, pull_request]
+permissions:
+  contents: read
+env:
+  CC: "clang"
+  CGO_LDFLAGS: "-fuse-ld=lld"
 
 jobs:
   checks:
     runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-go@v5
-      with:
-        go-version: 'stable'
-
-    - name: Get dependencies
-      run: |
-        sudo apt-get update && sudo apt-get install gcc libgl1-mesa-dev libegl1-mesa-dev libgles2-mesa-dev libx11-dev xorg-dev libpam-dev
-        go install golang.org/x/tools/cmd/goimports@latest
-        go install github.com/fzipp/gocyclo/cmd/gocyclo@latest
-        go install golang.org/x/lint/golint@latest
-        go install honnef.co/go/tools/cmd/staticcheck@latest
-
-    - name: Cleanup repository
-      run: rm -rf vendor/
-
-    - name: Vet
-      run: go vet -tags ci ./...
 
-    - name: Goimports
-      run: test -z $(goimports -e -d . | tee /dev/stderr)
-
-    - name: Gocyclo
-      run: gocyclo -over 30 .
-
-    - name: Golint
-      run: golint -set_exit_status $(go list -tags ci ./...)
-
-    - name: Staticcheck
-      run: staticcheck -go 1.19 ./...
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "stable"
+
+      - name: Get dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install --no-install-recommends clang lld libegl1-mesa-dev libgl1-mesa-dev libgles2-mesa-dev libx11-dev xorg-dev xvfb language-pack-en
+
+      - name: Set environment variable LANG
+        run: export LANG=en_EN.UTF-8
+
+      - name: Install analysis tools
+        run: |
+          go install mvdan.cc/gofumpt@latest
+          go install golang.org/x/tools/cmd/goimports@latest
+          go install github.com/fzipp/gocyclo/cmd/gocyclo@latest
+          go install honnef.co/go/tools/cmd/staticcheck@latest
+          go install lucor.dev/lian@latest
+
+      - name: Vet
+        run: go vet ./...
+
+      - name: Formatting
+        run: |
+          gofumpt -d -e .
+          test -z "$(goimports -e -d . | tee /dev/stderr)"
+
+      - name: Gocyclo
+        run: gocyclo -over 30 .
+
+      - name: Staticcheck
+        run: staticcheck ./...
+
+      - name: Check license of dependencies
+        run: lian -d --allowed="Apache-2.0, BSD-2-Clause, BSD-3-Clause, MIT, ISC"