ci.yml

name: CI

on:
  pull_request:
  push:
    branches:
      - master

# The workflow only reads the repository. Declaring this explicitly keeps the
# job token from inheriting broader write scopes by default.
permissions:
  contents: read

jobs:
  test:
    name: Go test
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
          cache: true

      - name: Verify formatting
        run: |
          fmt_out=$(gofmt -l .)
          if [ -n "$fmt_out" ]; then
            echo "The following files are not gofmt-formatted:"
            echo "$fmt_out"
            exit 1
          fi

      - name: Run vet
        run: go vet ./...

      - name: Run tests
        run: go test ./...