X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=ci%2Frun;h=4dbfefe1a3ffc1d79bc795756d3281e7f0ad0efc;hb=7181f7906e7fb6e73ebc0daa46975bfa9c71478f;hp=92e81a6e3105150ac87340ab738e50da89117046;hpb=7c4e5d64e25acec7209a54a15836b4481c450416;p=safcm%2Fsafcm.git

diff --git a/ci/run b/ci/run
index 92e81a6..4dbfefe 100755
--- a/ci/run
+++ b/ci/run
@@ -12,16 +12,33 @@ if test $# -ne 0; then
     flags="$*"
 fi
 
+# Run additional tests in CI
+SAFCM_CI_RUN=1
+export SAFCM_CI_RUN
+
+# shellcheck disable=SC2086
 make $flags
+# shellcheck disable=SC2086
 make test $flags
+make lint
 
 # Strict umask
 umask 077
-rm -rf *
+rm -rf ./*
 git checkout .
+# shellcheck disable=SC2086
 make $flags
+# shellcheck disable=SC2086
 make test $flags
 
 # Additional static checks only run in CI
-go get honnef.co/go/tools/cmd/staticcheck
+go install golang.org/x/vuln/cmd/govulncheck@latest
+govulncheck ./...
+go install honnef.co/go/tools/cmd/staticcheck@v0.4.6
 staticcheck ./...
+go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.55.2
+golangci-lint run
+
+test -z "$(git clean -nd)" # any untracked files left?
+make clean
+test -z "$(git clean -ndx)" # any unignored files left?