X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=ci%2Frun;h=bd89e953f82e3f354b1129a69e1cf010ff0218ad;hb=HEAD;hp=7ec5f161ed205a30a1f15afdedbba92d3d0784a0;hpb=add02385c9c48e7a3d9405b8023e72611e6d5a8f;p=safcm%2Fsafcm.git

diff --git a/ci/run b/ci/run
index 7ec5f16..bd89e95 100755
--- a/ci/run
+++ b/ci/run
@@ -1,5 +1,8 @@
 #!/bin/sh
 
+# SPDX-License-Identifier: GPL-3.0-or-later
+# Copyright (C) 2021-2024  Simon Ruderich
+
 set -eu
 set -x
 
@@ -7,9 +10,38 @@ set -x
 PATH=$HOME/go/bin:$PATH
 export PATH
 
-make
-go test -race ./...
+flags=
+if test $# -ne 0; then
+    flags="$*"
+fi
+
+# Run additional tests in CI
+SAFCM_CI_RUN=1
+export SAFCM_CI_RUN
+
+# shellcheck disable=SC2086
+make $flags
+# shellcheck disable=SC2086
+make test $flags
+make lint
+
+# Strict umask
+umask 077
+rm -rf ./*
+git checkout .
+# shellcheck disable=SC2086
+make $flags
+# shellcheck disable=SC2086
+make test $flags
 
 # Additional static checks only run in CI
-go get honnef.co/go/tools/cmd/staticcheck
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
+go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
 staticcheck ./...
+go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2
+golangci-lint run
+
+test -z "$(git clean -nd)" # any untracked files left?
+make clean
+test -z "$(git clean -ndx)" # any unignored files left?