linters-settings:
  goimports:
    local-prefixes: edge-infra.dev
  gosec:
    config:
      G306: "0644"
  depguard:
    rules:
      main:
        files:
        - $all
        deny:
        - pkg: io/ioutil
          desc: io/ioutil pkg is deprecated, please refactor
        - pkg: syscall
          desc: sycall deprecated, please use golang.org/x/sys/unix
        - pkg: github.com/fluxcd/pkg/runtime/conditions
          desc: use drop-in replacement edge-infra.dev/pkg/k8s/runtime/conditions instead
        - pkg: github.com/bradleyfalzon/ghinstallation$
          desc: use github.com/bradleyfalzon/ghinstallation/v2 due to vulnerabilities in v1
        - pkg: github.com/peterbourgon/ff$
          desc: use github.com/peterbourgon/ff/v3
        - pkg: github.com/ghodss/yaml
          desc: use sigs.k8s.io/yaml instead
        - pkg: golang.org/x/exp/slices
          desc: use slices instead
        - pkg: golang.org/x/exp/maps
          desc: use maps instead

linters:
  disable-all: true
  enable:
  - dupl
  - errcheck
  - goconst
  - gocyclo
  - goimports
  - revive
  - gosec
  - gosimple
  - govet
  - ineffassign
  - misspell
  - nestif
  - unparam
  - staticcheck
  - unused
  - unconvert
  - whitespace
  - depguard

issues:
  exclude-files:
  - pkg/edge/api/graph/mapper/mapper_secrets_test.go
  exclude-dirs:
  # Deprecated code that should be removed before fixed.
  - pkg/edge/gitops/chariot
  - pkg/edge/gitops/fns/addcluster
  # Forked code
  - pkg/f8n/devinfra/repo/owners/policybot
  - pkg/lib/ini
  - third_party
  exclude-rules:
  - path: resolvers\.go
    linters:
    - goimports
    - revive
  - path: orchestration.go
    linters:
    - gocyclo
  - path: session_test.go
    linters:
    - gosec

run:
  # timeout for analysis, e.g. 30s, 5m, default is 1m
  timeout: 5m