code-quality:
    image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/golangci/golangci-lint:v1.64.6-alpine
    stage: analyze
    script:
        # writes golangci-lint output to gl-code-quality-report.json
        - apk add --update make jq
        - make ci-lint
    artifacts:
        reports:
            codequality: gl-codeclimate.json
        paths:
            - gl-codeclimate.json
    needs: []

code-vulnerability:
    image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/golang:$GOLANG_VERSION
    stage: analyze
    script:
        - go install golang.org/x/vuln/cmd/govulncheck@latest
        - govulncheck ./...
    needs: []