flags="$*"
fi
+# Run additional tests in CI
+SAFCM_CI_RUN=1
+export SAFCM_CI_RUN
+
+# shellcheck disable=SC2086
make $flags
+# shellcheck disable=SC2086
make test $flags
+make lint
# Strict umask
umask 077
-rm -rf *
+rm -rf ./*
git checkout .
+# shellcheck disable=SC2086
make $flags
+# shellcheck disable=SC2086
make test $flags
# Additional static checks only run in CI
-go get honnef.co/go/tools/cmd/staticcheck
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
+go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
staticcheck ./...
+go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2
+golangci-lint run
+
+test -z "$(git clean -nd)" # any untracked files left?
+make clean
+test -z "$(git clean -ndx)" # any unignored files left?