.golangci.yaml

linters:
  settings:
    depguard:
      rules:
        main:
          list-mode: lax
          deny:
            # Cannot use gomodguard, which examines go.mod, as "golang.org/x/exp/slices" is not a module and doesn't appear in go.mod.
            - pkg: "golang.org/x/exp/slices"
              desc: "Use 'slices' instead"
            - pkg: "golang.org/x/exp/maps"
              desc: "Use 'maps' or 'github.com/samber/lo' instead"
    dupl:
      threshold: 100
    errcheck:
      check-type-assertions: true
      check-blank: true
    goconst:
      min-len: 3
      min-occurrences: 3
    gocritic:
      disabled-checks:
        - appendAssign
        - unnamedResult
        - whyNoLint
        - importShadow # FIXME
        - indexAlloc
        - octalLiteral
        - hugeParam
        - rangeValCopy
        - regexpSimplify
        - sloppyReassign
        - commentedOutCode
      enabled-tags:
        - diagnostic
        - style
        - performance
        - experimental
        - opinionated
      settings:
        ruleguard:
          failOn: all
          rules: '${base-path}/misc/lint/rules.go'
    gocyclo:
      min-complexity: 20
    gomodguard:
      blocked:
        modules:
          - github.com/hashicorp/go-version:
              recommendations:
                - github.com/aquasecurity/go-version
              reason: "`aquasecurity/go-version` is designed for our use-cases"
          - github.com/Masterminds/semver:
              recommendations:
                - github.com/aquasecurity/go-version
              reason: "`aquasecurity/go-version` is designed for our use-cases"
    gosec:
      excludes:
        - G101
        - G114
        - G115
        - G204
        - G304
        - G402
    govet:
      disable:
        - shadow
    misspell:
      locale: US
      ignore-rules:
        - behaviour
        - licence
        - optimise
        - simmilar
    perfsprint:
      # Optimizes even if it requires an int or uint type cast.
      int-conversion: true
      # Optimizes into `err.Error()` even if it is only equivalent for non-nil errors.
      err-error: true
      # Optimizes `fmt.Errorf`.
      errorf: true
      # Optimizes `fmt.Sprintf` with only one argument.
      sprintf1: false
      # Optimizes into strings concatenation.
      strconcat: false
    testifylint:
      enable-all: true

  default: none

  enable:
    - bodyclose
    - depguard
    - goconst
    - gocritic
    - gocyclo
    - gomodguard
    - gosec
    - govet
    - ineffassign
    - misspell
    - perfsprint
#    - revive  # FIXME more than 50 new issues
    - testifylint
    - unconvert
    - unused
    - usestdlibvars
    - usetesting

  exclusions:
    generated: lax
    paths:
      - "examples/*"
      - "pkg/iac/scanners/terraform/parser/funcs" # copies of Terraform functions
    rules:
      - path: ".*_test.go$"
        linters:
          - goconst
          - gosec
          - unused
      - path: ".*_test.go$"
        linters:
          - govet
        text: "copylocks:"
      - path: ".*_test.go$"
        linters:
          - gocritic
        text: "commentFormatting:"
      - path: ".*_test.go$"
        linters:
          - gocritic
        text: "exitAfterDefer:"
      - path: ".*_test.go$"
        linters:
          - gocritic
        text: "importShadow:"
      - linters:
          - perfsprint
        text: "fmt.Sprint"
      - linters:
          - goconst
        text: "string `each` has 3 occurrences, make it a constant"  # FIXME
      - linters:
          - testifylint
        text: "(len|empty|equal-values)"  # FIXME
    presets:
      - comments
      - common-false-positives
      - legacy
      - std-error-handling
    warn-unused: true

run:
  go: '1.24'
  timeout: 30m

issues:
  max-same-issues: 0

formatters:
  enable:
    - gci
    - gofmt

  exclusions:
    generated: lax
    paths:
      - examples/*
      - pkg/iac/scanners/terraform/parser/funcs # copies of Terraform functions

  settings:
    gci:
      sections:
        - standard
        - default
        - prefix(github.com/aquasecurity/)
        - blank
        - dot
    gofmt:
      simplify: false
      rewrite-rules:
        - pattern: interface{}
          replacement: any

version: "2"