Google Git
Sign in
fuchsia / shac-project / shac / 349fbb863c794b7dda10fbea14568c9c5dd759aa
commit349fbb863c794b7dda10fbea14568c9c5dd759aa[log] [tgz]
authorOliver Newman <olivernewman@google.com>Tue Aug 08 20:56:07 2023 +0000
committerCQ Bot <fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com>Tue Aug 08 20:56:07 2023 +0000
tree8a2ec475e04139f295ddc783e87125fdfb175dc3
parenteea6195bb54f8a766c5de85f7d8f2f319eb829a2 [diff]
[go] Pin tests to use Go 1.20

Go 1.21 was just released but seems to have some issues around
environment variable handling that cause warnings and failures related
to the GOPROXY and GOPATH env vars even when those vars are unset. I
spend a while investigating but couldn't figure out a fix, so I'm
punting on it in case it turns out to be a bug that gets fixed upstream.

Change-Id: Id0f6e6f6e9dea28568deee4712738c946b9dc418
Reviewed-on: https://fuchsia-review.googlesource.com/c/shac-project/shac/+/897162
Fuchsia-Auto-Submit: Oliver Newman <olivernewman@google.com>
Reviewed-by: Marc-Antoine Ruel <maruel@google.com>
Commit-Queue: Auto-Submit <auto-submit@fuchsia-infra.iam.gserviceaccount.com>
1 file changed
tree: 8a2ec475e04139f295ddc783e87125fdfb175dc3
  1. .github/
  2. checks/
  3. doc/
  4. images/
  5. internal/
  6. scripts/
  7. vendor/
  8. .gitignore
  9. AUTHORS
  10. codecov.yml
  11. CONTRIBUTING.md
  12. go.mod
  13. go.sum
  14. LICENSE
  15. main.go
  16. OWNERS
  17. PATENTS
  18. README.md
  19. shac.star
  20. shac.textproto
README.md

shac

Shac (Scalable Hermetic Analysis and Checks) is a unified and ergonomic tool and framework for writing and running static analysis checks.

Shac checks are written in Starlark.

usage demonstration

Usage

go install go.fuchsia.dev/shac-project/shac@latest
shac check
shac doc shac.star | less

Documentation

Road map

Planned features/changes, in descending order by priority:

  • [x] Configuring files to exclude from shac analysis in shac.textproto
  • [x] Include unstaged files in analysis, including respecting unstaged shac.star files
  • [x] Automatic fix application with handling for conflicting suggestions
  • [ ] Provide a .shac cache directory that checks can write to
  • [ ] Mount checkout directory read-only
    • [x] By default
    • [ ] Unconditionally
  • [ ] Give checks access to the commit message via ctx.scm
  • [ ] Built-in formatting of Starlark files
  • [ ] Configurable “pass-throughs” - non-default environment variables and mounts that can optionally be passed through to the sandbox
  • [ ] Add glob arguments to ctx.scm.{all,affected}_files() functions for easier filtering
  • [ ] Filesystem sandboxing on MacOS
  • [ ] Windows sandboxing
  • [ ] Testing framework for checks

Contributing

⚠ The source of truth is at https://fuchsia.googlesource.com/shac-project/shac.git and uses Gerrit for code review.

See CONTRIBUTING.md to submit changes.