feat(cel): scan whole objects/arrays in hasSecrets #30

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	# Cancel in-progress runs on new pushes to same PR/branch
	concurrency:
	group: ci-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	lint:
	name: Lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	cache: true

	- name: Check formatting
	run: \|
	if [ -n "$(gofmt -l .)" ]; then
	echo "::error::Code is not formatted. Run 'gofmt -w .' to fix."
	gofmt -d .
	exit 1
	fi

	- name: Run golangci-lint
	uses: golangci/golangci-lint-action@v7
	with:
	version: v2.8.0

	- name: Lint YAML
	run: \|
	if command -v yamlfmt &> /dev/null; then
	yamlfmt -lint .
	else
	echo "yamlfmt not installed, skipping YAML lint"
	fi

	test:
	name: Test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	cache: true

	- name: Run tests
	run: go test -race -coverprofile=coverage.out -covermode=atomic ./...

	- name: Upload coverage
	uses: codecov/codecov-action@v4
	with:
	files: coverage.out
	fail_ci_if_error: false
	env:
	CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

	build:
	name: Build
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod
	cache: true

	- name: Build all binaries
	run: \|
	go build ./cmd/keep
	go build ./cmd/keep-mcp-relay
	go build ./cmd/keep-llm-gateway

Navigation Menu