X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=ci%2Frun;h=67c0e47c74713e8bc775761dd341137e1e3046c7;hb=HEAD;hp=92e81a6e3105150ac87340ab738e50da89117046;hpb=7c4e5d64e25acec7209a54a15836b4481c450416;p=safcm%2Fsafcm.git

diff --git a/ci/run b/ci/run
index 92e81a6..bd89e95 100755
--- a/ci/run
+++ b/ci/run
@@ -1,5 +1,8 @@
 #!/bin/sh
 
+# SPDX-License-Identifier: GPL-3.0-or-later
+# Copyright (C) 2021-2024  Simon Ruderich
+
 set -eu
 set -x
 
@@ -12,16 +15,33 @@ if test $# -ne 0; then
     flags="$*"
 fi
 
+# Run additional tests in CI
+SAFCM_CI_RUN=1
+export SAFCM_CI_RUN
+
+# shellcheck disable=SC2086
 make $flags
+# shellcheck disable=SC2086
 make test $flags
+make lint
 
 # Strict umask
 umask 077
-rm -rf *
+rm -rf ./*
 git checkout .
+# shellcheck disable=SC2086
 make $flags
+# shellcheck disable=SC2086
 make test $flags
 
 # Additional static checks only run in CI
-go get honnef.co/go/tools/cmd/staticcheck
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
+go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
 staticcheck ./...
+go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2
+golangci-lint run
+
+test -z "$(git clean -nd)" # any untracked files left?
+make clean
+test -z "$(git clean -ndx)" # any unignored files left?