fix(lockdown): isolate repo-access cache per caller identity #5426
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: golangci-lint | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| golangci: | |
| name: lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - name: Build UI | |
| uses: ./.github/actions/build-ui | |
| - uses: actions/setup-go@v7 | |
| with: | |
| go-version: '1.25' | |
| - name: golangci-lint | |
| uses: golangci/golangci-lint-action@v9 | |
| with: | |
| # sync with script/lint | |
| version: v2.9 | |
| # The action's config verification downloads a JSON schema from | |
| # golangci-lint.run on every run, so a blip reaching that host fails | |
| # the job before any linter runs. Skip it: linting must depend only | |
| # on the checked-out code, and script/lint does not verify either. | |
| verify: false |