devboard/.github/workflows/code-quality.yml at master · ameertechy/devboard · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# Goal - I have to do SAST for my Code

name: Code Quality

on:
    workflow_call:  # you can call this workflow before/after any other workflow

jobs:
    sast:
        runs-on: ubuntu-latest
        steps:
            - name: Code Checkout
              uses: actions/checkout@v7

            - name: Setup NodeJs
              uses: actions/setup-node@v6
              with:
                node-version: '20'
                cache: npm
                cache-dependency-path: frontend/package-lock.json

            - name: Install npm Packages
              run: npm install --legacy-peer-deps
              working-directory: frontend

            - name: Run Linter
              run: npm run lint
              working-directory: frontend

            - name: Setup Go
              uses: actions/setup-go@v6
              with:
                go-version: '1.23'
                go-version-file: 'go.mod'
                cache-dependency-path: go.sum

            - name: Run Go Formatter
              run: go fmt
              working-directory: backend

            - name: Run Go Vet
              run: go vet
              working-directory: backend