-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add a GitHub action for staticcheck #19
Comments
Following the conversation here from #18. If you'd like the staticcheck and semgrep results posted as comments then the tool linked in #18 can be installed from https://github.com/apps/muse-dev. Growing the tool set used by Muse is on par with adding to github actions (taking perhaps dozens of lines of script to add a new tool), with some differences that Muse has issue accumulation, filtering, and reports via the comment system along with providing a curated and managed default tool set. Regarding this repository and golang - I previously looked at gosec but its results were duplicative of staticcheck, so you might want to choose just one of the two. There's are other very opinionated tools out there, like goparamcount, which might be interesting depending on how your concerns align with those tools' opinions. |
Thanks I will try muse-dev but may need to convince the org admins,
|
Add a GitHub action for staticcheck to catch early issues like #18
Could also be added to Travis.
The text was updated successfully, but these errors were encountered: