.golangci.yml

# https://golangci-lint.run/usage/quick-start/
run:
  timeout: 8m
  skip-dirs:
    - dist
    - docs
    - examples
    - hack
    - manifests
    - pkg/client
    - sdks
    - ui
    - vendor
  skip-files:
    - server/static/files.go
  build-tags:
    - api
    - cli
    - cron
    - executor
    - examples
    - corefunctional
    - functional
    - plugins
linters:
  enable:
    - bodyclose
    - errcheck
    - goimports
    # only minor issues
    # - errorlint
    - exportloopref
    # seems to have bugs in recent version, also slow
    # - gci
    - gosec
    - gosimple
    - govet
    - ineffassign
    - misspell
    - rowserrcheck
    - sqlclosecheck
    - staticcheck
    - typecheck
    - unparam
    - unused
linters-settings:
  goimports:
    local-prefixes: github.com/argoproj/argo-workflows/
  gosec:
    includes:
      - G304
      - G307
    excludes:
      # G106: Use of ssh InsecureIgnoreHostKey should be audited
      - G106
      # G402: TLS InsecureSkipVerify set true
      - G402
      # G601: Implicit memory aliasing in for loop.
      - G601
issues:
  exclude:
    # We are leaving io/ioutil for now to make backports easier
    # https://github.com/argoproj/argo-workflows/pull/6964#issuecomment-946827019
    - "SA1019: \"io/ioutil\" has been deprecated since Go 1.16"
  exclude-rules:
    - path: server/artifacts/artifact_server_test.go
      text: "response body must be closed"