test

security: harden user-input attack surface (#50-#59) (#41) #483

	name: test

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-go@v5
	with:
	go-version: "1.25"

	- name: build
	run: go build -o /tmp/odek-test github.com/BackendStack21/odek/cmd/odek && chmod +x /tmp/odek-test

	- name: test
	run: ODEK_BINARY=/tmp/odek-test go test ./... -short -race -coverprofile=coverage.out -covermode=atomic -count=1

	- name: coverage
	run: go tool cover -func=coverage.out

	- name: vet
	run: go vet ./...

	lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-go@v5
	with:
	go-version: "1.25"

	- name: golangci-lint
	uses: golangci/golangci-lint-action@v6
	with:
	version: v1.64
	# Compile golangci-lint with the toolchain set up above (Go 1.25) so
	# its typechecker can read the `go 1.25` module. The official
	# prebuilt v1.64 binary is built with Go 1.24 and rejects it.
	install-mode: goinstall
	args: --timeout=10m

Provide feedback