.golangci.yml

run:
  # timeout for analysis, e.g. 30s, 5m, default is 1m
  deadline: 5m

  # include test files or not, default is true
  # tests: true

linters:
  enable:
    - depguard
    - errcheck
    - goconst
    - gocritic
    - gosec
    - gosimple
    - govet
    - ineffassign
    - misspell
    - staticcheck
    - stylecheck
    - sqlclosecheck
    - unconvert
    - unparam
    - unused
  disable:
    - contextcheck
    - exhaustive
    - protogetter
    - musttag
  enable-all: false
  presets:
    - bugs
    - unused

issues:
  # List of regexps of issue texts to exclude, empty list by default.
  # But independently from this option we use default exclude patterns,
  # it can be disabled by `exclude-use-default: false`. To list all
  # excluded by default patterns execute `golangci-lint run --help`
  exclude:
    - "composite literal uses unkeyed fields"
  exclude-dirs:
    - "bin"
    - "_tools"
    - "dist"
    - "rpc/flipt"
    - "ui"

  exclude-files:
    - ".*pb.go"

linters-settings:
  depguard:
    rules:
      main:
        deny:
          - pkg: "github.com/pkg/errors"
            desc: Should be replaced by standard lib errors package
  staticcheck:
    checks:
      - all
      - "-SA1019" # exclude staticcheck messages from github.com/golang/protobuf
  stylecheck:
    checks:
      - all
      - "-ST1003" # exclude underscores
  gosec:
    excludes: # exclude gosec messages about weak crypto
      - "G501"
      - "G401"
      - "G404"
      - "G602" # False positive for this rule in v1.54.2 https://github.com/securego/gosec/issues/1005
      - "G115"
  goconst:
    ignore-tests: true