Run go-makefile-maker

.github/renovate.json

@@ -7,7 +7,8 @@
   ],
   "assignees": [
     "talal",
-    "majewsky"
+    "majewsky",
+    "SuperSandro2000"
   ],
   "commitMessageAction": "Renovate: Update",
   "constraints": {

.github/workflows/license.yaml → .github/workflows/checks.yaml

@@ -3,23 +3,20 @@
 # Edit Makefile.maker.yaml instead.                                            #
 ################################################################################
 
-name: License
+name: Checks
 "on":
   push:
     branches:
       - master
-    paths-ignore:
-      - '**.md'
   pull_request:
     branches:
       - '*'
-    paths-ignore:
-      - '**.md'
 permissions:
+  checks: write
   contents: read
 jobs:
-  addlicense:
-    name: Check
+  checks:
+    name: Checks
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
@@ -28,6 +25,23 @@ jobs:
         uses: actions/setup-go@v4
         with:
           go-version: "1.20"
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v3
+        with:
+          base-ref: ${{ github.event.pull_request.base.sha || 'main' }}
+          deny-licenses: AGPL-1.0, AGPL-3.0, GPL-1.0, GPL-2.0, GPL-3.0, LGPL-2.0, LGPL-2.1, LGPL-3.0
+          fail-on-severity: moderate
+          head-ref: ${{ github.event.pull_request.head.sha || github.ref }}
+      - name: Run govulncheck
+        uses: golang/govulncheck-action@v1
+      - name: Check for spelling errors
+        uses: reviewdog/action-misspell@v1
+        with:
+          exclude: ./vendor/*
+          fail_on_error: true
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          ignore: importas
+          reporter: github-check
       - name: Check if source code files have license header
         run: |
           shopt -s globstar

.github/workflows/ci.yaml

@@ -18,10 +18,8 @@ name: CI
 permissions:
   contents: read
 jobs:
-  build:
-    name: Build
-    needs:
-      - lint
+  buildAndLint:
+    name: Build & Lint
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
@@ -30,26 +28,16 @@ jobs:
         uses: actions/setup-go@v4
         with:
           go-version: "1.20"
-      - name: Make build
+      - name: Build all binaries
         run: make build-all
-  lint:
-    name: Lint
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check out code
-        uses: actions/checkout@v3
-      - name: Set up Go
-        uses: actions/setup-go@v4
-        with:
-          go-version: "1.20"
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v3
         with:
           version: latest
   test:
     name: Test
     needs:
-      - build
+      - buildAndLint
     runs-on: ubuntu-latest
     steps:
       - name: Check out code

Makefile.maker.yaml

@@ -21,10 +21,9 @@ golangciLint:
   createConfig: true
 
 githubWorkflow:
-  global:
-    ignorePaths: ["**.md"] # all Markdown files
   ci:
     enabled: true
+    ignorePaths: ["**.md"] # all Markdown files
     kubernetesEnvtest:
       enabled: true
   securityChecks:
@@ -33,13 +32,13 @@ githubWorkflow:
     enabled: true
   spellCheck:
     enabled: true
-    ignorePaths: [] # override global setting so that nothing is ignored
 
 renovate:
   enabled: true
   assignees:
     - talal
     - majewsky
+    - SuperSandro2000
   packageRules:
     - matchPackageNames: ["sigs.k8s.io/controller-runtime"]
       matchUpdateTypes: ["major"]