precommit

Author: kevin-valerio

.github/workflows/go.yml

@@ -6,17 +6,82 @@ on:
   pull_request:
     branches: [ "master" ]
 
+permissions: {}
+
 jobs:
 
+  workflow-lint:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        persist-credentials: false
+
+    - name: Lint workflows (actionlint)
+      uses: devops-actions/actionlint@e7ee33fbf5aa8c9f9ee1145137f3e52e25d6a35b # v0.1.3
+
+    - name: Audit workflows (zizmor)
+      uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0
+      with:
+        inputs: .github/workflows
+        advanced-security: false
+
+  lint-and-types:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: read
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        persist-credentials: false
+
+    - name: Set up Go (bootstrap)
+      uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
+      with:
+        go-version: '1.25.5'
+        cache: true
+        cache-dependency-path: tests/go.mod
+
+    - name: Export GOROOT_BOOTSTRAP
+      run: echo "GOROOT_BOOTSTRAP=$(go env GOROOT)" >> $GITHUB_ENV
+
+    - name: Build Go-Panikint (truncation disabled)
+      run: |
+        cd src
+        ./make.bash
+
+    - name: Lint (go vet)
+      run: |
+        cd tests
+        GOROOT=${{ github.workspace }} ${{ github.workspace }}/bin/go vet ./...
+
+    - name: Type check (no tests)
+      run: |
+        cd tests
+        GOROOT=${{ github.workspace }} ${{ github.workspace }}/bin/go test -run=^$ ./...
+
   test-no-truncation:
     runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: read
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        persist-credentials: false
 
     - name: Set up Go (bootstrap)
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
       with:
         go-version: '1.25.5'
+        cache: true
+        cache-dependency-path: tests/go.mod
 
     - name: Export GOROOT_BOOTSTRAP
       run: echo "GOROOT_BOOTSTRAP=$(go env GOROOT)" >> $GITHUB_ENV
@@ -33,13 +98,20 @@ jobs:
 
   test-with-truncation:
     runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      contents: read
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      with:
+        persist-credentials: false
 
     - name: Set up Go (bootstrap)
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
       with:
         go-version: '1.25.5'
+        cache: true
+        cache-dependency-path: tests/go.mod
 
     - name: Export GOROOT_BOOTSTRAP
       run: echo "GOROOT_BOOTSTRAP=$(go env GOROOT)" >> $GITHUB_ENV

.gitignore

@@ -1,3 +1,4 @@
+.serena
 .idea/
 temp/*
 fuzz_test/testdata/

.pre-commit-config.yaml

@@ -0,0 +1,10 @@
+repos:
+  - repo: local
+    hooks:
+      - id: gofmt
+        name: gofmt
+        entry: gofmt
+        language: system
+        types: [go]
+        args: [-w]
+        exclude: '(^test/|/testdata/)'