name: dev workflow
on:
  push:
    branches:
        - '*'
    pull_request:
      paths:
        - '**.go'
      
jobs:
  test:
    env:
      TOKEN: ${{ secrets.TOKEN }}
      USERNAME: ${{ vars.USERNAME }}
      TAG_VERSION: ${{ github.ref_name }}
    runs-on: ubuntu-latest
      steps:
        - name: Checkout code
          uses: actions/checkout@v4

        - name: Setup Go
          uses: actions/setup-go@v5
          with:
            go-version-file: 'go.mod'
            
        - name: test with go
          run: go test -v ./...

  vulnCheck:
    env:
      TOKEN: ${{ secrets.TOKEN }}
      USERNAME: ${{ vars.USERNAME }}
      TAG_VERSION: ${{ github.ref_name }}
    runs-on: ubuntu-latest
      steps:
        - name: checkout Code
          uses: actions/checkout@v4

        - name: go vuln check
          uses: golang/govulncheck-action@v1
          with:
            go-version-file: 'go.mod'