.hearthforge-ci.toml
| 1 | # Checks and build. Runs on every push to master and on every tag. |
| 2 | # Docker Hub mirror: same official image, no anonymous pull limit |
| 3 | image = "mirror.gcr.io/library/golang:1.27" |
| 4 | work_dir = "/ci/build" |
| 5 | clone_project_to = "/ci/build/project" |
| 6 | shell_setup = "set -euo pipefail" |
| 7 | timeout = 1800 |
| 8 | memory_limit = "3g" |
| 9 | |
| 10 | cache = [ |
| 11 | { path = "/go/pkg/mod", max_size = "1g" }, |
| 12 | { path = "/root/.cache/go-build", max_size = "1g" }, |
| 13 | ] |
| 14 | |
| 15 | [on] |
| 16 | push = ["master", "main"] |
| 17 | tag = true |
| 18 | |
| 19 | [[steps]] |
| 20 | name = "tools" |
| 21 | run_sh = """ |
| 22 | go install mvdan.cc/gofumpt@latest |
| 23 | go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest |
| 24 | go install golang.org/x/vuln/cmd/govulncheck@latest |
| 25 | """ |
| 26 | |
| 27 | [[steps]] |
| 28 | name = "tidy" |
| 29 | # The checkout has no .git, so compare copies instead of using git diff. |
| 30 | run_sh = "cd project && cp go.mod /tmp/go.mod && cp go.sum /tmp/go.sum && go mod tidy && diff /tmp/go.mod go.mod && diff /tmp/go.sum go.sum" |
| 31 | |
| 32 | [[steps]] |
| 33 | name = "format" |
| 34 | run_sh = "cd project && test -z \"$(gofumpt -l -extra .)\" || (gofumpt -l -extra . && exit 1)" |
| 35 | |
| 36 | [[steps]] |
| 37 | name = "lint" |
| 38 | run_sh = "cd project && golangci-lint run ./..." |
| 39 | |
| 40 | [[steps]] |
| 41 | name = "vulncheck" |
| 42 | warn_on_fail = true |
| 43 | run_sh = "cd project && govulncheck ./..." |
| 44 | |
| 45 | [[steps]] |
| 46 | name = "test" |
| 47 | run_sh = "cd project && go test -race -count=1 ./..." |
| 48 | |
| 49 | [[steps]] |
| 50 | name = "build" |
| 51 | run_sh = "cd project && CGO_ENABLED=0 go build -trimpath -ldflags='-s -w' -o physiobase ./cmd/physiobase" |
| 52 | publish_file = ["/ci/build/project/physiobase"] |
| 53 |