.golangci.yml

version: "2"
run:
  tests: true
  build-tags:
    - mage
linters:
  enable:
    - asasalint
    - asciicheck
    - bidichk
    - bodyclose
    - contextcheck
    - err113
    - errchkjson
    - errorlint
    - exhaustive
    - gocheckcompilerdirectives
    - gochecksumtype
    - gocritic
    - gocyclo
    - goheader
    - gosec
    - gosmopolitan
    - loggercheck
    - makezero
    - misspell
    - nilerr
    - nilnesserr
    - noctx
    - protogetter
    - reassign
    - recvcheck
    - revive
    - rowserrcheck
    - spancheck
    - sqlclosecheck
    - testifylint
    - unparam
    - zerologlint
  disable:
    - durationcheck
    - goconst
    - musttag
  settings:
    goheader:
      template-path: code-header-template.txt
    nestif:
      min-complexity: 6
  exclusions:
    generated: lax
    presets:
      - comments
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      - linters:
          - deadcode
          - errorlint
          - gocyclo
        path: _test\.go
      - linters:
          - bodyclose
          - deadcode
          - gocyclo
          - unparam
          - varcheck
        path: pkg/webtests/*
      - linters:
          - gocritic
        path: pkg/webtests/*
        text: unlambda
      - linters:
          - bodyclose
        path: pkg/modules/background/unsplash/unsplash\.go
      - linters:
          - err113
          - exhaustive
        path: pkg/migration/*
      - linters:
          - exhaustive
        path: pkg/models/task_collection_filter\.go
      - linters:
          - gosec
        path: pkg/utils/random_string\.go
        text: 'G404:' # We don't care about cryptographically secure randomness when we're using that utility function.
      - linters:
          - err113
        path: pkg/modules/dump/*
      - linters:
          - err113
        path: pkg/
        text: 'do not define dynamic errors, use wrapped static errors instead:'
      - linters:
          - gocritic
        text: 'commentFormatting: put a space between `//` and comment text'
      - linters:
          - gocyclo
        path: pkg/modules/migration
      - linters:
          - goheader
          - gosmopolitan
          - misspell
        path: pkg/routes/api/v1/docs.go
      - linters:
          - goheader
        text: Missed string
      - linters:
          - errorlint
        path: pkg/.*/error.go
      - linters:
          - nilerr
        path: pkg/models/favorites\.go
      - path: pkg/models/project\.go
        text: string `parent_project_id` has 3 occurrences, make it a constant
      - linters:
          - musttag
        path: pkg/models/events\.go
      - path: pkg/models/task_collection.go
        text: append result not assigned to the same slice
      - linters:
          - testifylint
        path: pkg/modules/migration/ticktick/ticktick_test.go
      - linters:
          - revive
        path: pkg/migration/*
        text: parameter 'tx' seems to be unused, consider removing or renaming it as
      - linters:
          - gosec
        path: pkg/cmd/user.go
        text: 'G115: integer overflow conversion uintptr -> int'
      - linters:
          - gosec
        text: 'G115: integer overflow conversion int64 -> uint64'
      - linters:
          - gosec
        text: 'G115: integer overflow conversion int -> uint64'
      - linters:
          - recvcheck
        text: the methods of "Permission" use pointer receiver and non-pointer receiver.
      - linters:
          - recvcheck
        text: the methods of "SubscriptionEntityType" use pointer receiver and non-pointer receiver.
      - linters:
          - revive
        path: pkg/utils/*
        text: 'var-naming: avoid meaningless package names'
      - linters:
          - revive
        path: pkg/routes/api/shared/*
        text: 'var-naming: avoid meaningless package names'
      - linters:
          - contextcheck
        path: pkg/routes/api/v2/backgrounds.go # the unsplash provider intentionally uses context.Background(); its interface is shared with v1 and can't take a context
      - linters:
          - revive
        text: 'var-naming: avoid package names that conflict with Go standard library package names'
      - linters:
          - err113
        path: magefile.go
        text: 'do not define dynamic errors, use wrapped static errors instead:'
      - linters:
          - gosec
        text: 'G117:' # Struct fields named Password/Secret/AccessToken are intentional data model fields
      - linters:
          - gosec
        text: 'G101:'
        path: (pkg/webtests/|pkg/e2etests/|_test\.go) # Test fixtures with bcrypt hashes, not real credentials
      - linters:
          - gosec
        text: 'G70[234]:'
        path: magefile.go # Build tooling, not user-facing code
      - linters:
          - goheader
        path: plugins/
      # gosec G124 flags synthetic request cookies in tests; they carry no security relevance.
      - linters:
          - gosec
        text: 'G124:'
        path: _test\.go
      # noctx flags httptest.NewRequest, which builds inbound requests for handler tests where a cancellation context adds nothing.
      - linters:
          - noctx
        text: 'httptest.NewRequest must not be called'
    paths:
      - third_party$
      - builtin$
      - examples$
      - pkg/routes/api/v1/docs.go
      - pkg/yaegi_symbols/..*
      - plugins-dev/..*
formatters:
  enable:
    - gofmt
    - goimports
  exclusions:
    generated: lax
    paths:
      - third_party$
      - builtin$
      - examples$
      - pkg/yaegi_symbols/..*