Merge pull request #12 from dynatrace-oss/dependabot/github_actions/golangci/golangci-lint-action-9

build(deps): Bump golangci/golangci-lint-action from 6 to 9

Author: ivan-gudak

.github/workflows/sast.yml

@@ -17,6 +17,6 @@ jobs:
           go-version-file: go.mod
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@v9
         with:
           version: latest

.github/workflows/sonar.yml

@@ -9,6 +9,8 @@ on:
 jobs:
   sonar:
     runs-on: ubuntu-latest
+    env:
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
     steps:
       - uses: actions/checkout@v6
         with:
@@ -22,7 +24,12 @@ jobs:
         run: go test -race -coverprofile=coverage.out ./...
 
       - name: SonarCloud Scan
+        if: env.SONAR_TOKEN != ''
         uses: SonarSource/sonarcloud-github-action@master
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_TOKEN: ${{ env.SONAR_TOKEN }}
+
+      - name: SonarCloud Scan Unavailable
+        if: env.SONAR_TOKEN == ''
+        run: echo "Skipping SonarCloud scan because SONAR_TOKEN is not available in this workflow context."

.golangci.yml

@@ -1,3 +1,5 @@
+version: "2"
+
 linters:
   enable:
     - gosec
@@ -8,15 +10,15 @@ linters:
     - unused
     - misspell
 
-linters-settings:
-  gosec:
-    severity: medium
-    confidence: medium
+  settings:
+    gosec:
+      severity: medium
+      confidence: medium
 
-issues:
-  exclude-rules:
-    # Test files: relax some rules
-    - path: _test\.go
-      linters:
-        - gosec
-        - errcheck
+  exclusions:
+    rules:
+      # Test files: relax some rules
+      - path: _test\.go
+        linters:
+          - gosec
+          - errcheck