.golangci.yaml

# Copyright 2021 the Exposure Notifications Verification Server authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

run:
  # default: '1m'
  timeout: '5m'

  # default: []
  build-tags:
  - 'all'

  # default: ''
  modules-download-mode: 'readonly'

  # default: false
  allow-parallel-runners: true

linters:
  enable:
  - 'asciicheck'
  - 'bodyclose'
  - 'depguard'
  - 'dogsled'
  - 'errcheck'
  - 'errorlint'
  - 'exhaustive'
  - 'exportloopref'
  - 'gofmt'
  - 'goheader'
  - 'goimports'
  - 'gomodguard'
  - 'goprintffuncname'
  - 'gosec'
  - 'gosimple'
  - 'govet'
  - 'ineffassign'
  - 'makezero'
  - 'misspell'
  - 'nakedret'
  - 'noctx'
  - 'nolintlint'
  - 'paralleltest'
  - 'prealloc'
  - 'predeclared'
  - 'revive'
  - 'sqlclosecheck'
  - 'staticcheck'
  - 'stylecheck'
  - 'typecheck'
  - 'unconvert'
  - 'unused'
  - 'whitespace'

issues:
  # default: []
  exclude:
  - '^S1023:' # staticcheck: redundant returns help with http handlers
  - '^SA3000:' # staticcheck: not required in Go 11.4+
  - '^G101:' # gosec: many false positives
  - '^G102:' # gosec: we have to bind to all ifaces
  - '^G203:' # gosec: we sanitize HTML
  - '^G505:' # gosec: we use crypto/sha1 for some HMACs
  - '^Range statement' # paralleltest: false positives
  - '^if-return' # revive: false positives

  # default: 50
  max-issues-per-linter: 0

  # default: 3
  max-same-issues: 0

severity:
  # default: ''
  default-severity: error