run:
  timeout: 5m
  modules-download-mode: readonly

linters:
  enable:
    - errcheck
    - gosimple
    - govet
    - ineffassign
    - staticcheck
    - typecheck
    - unused
    - gofmt
    - goimports
    - goconst
    - misspell
    - revive
    - unconvert
    - unparam
    - gosec
  disable:
    - deadcode # deprecated
    - varcheck # deprecated
    - structcheck # deprecated

linters-settings:
  gosec:
    excludes:
      - G304 # file path provided as taint input - we handle this carefully
  revive:
    rules:
      - name: exported
        disabled: true # Allow unexported functions for internal use
  errcheck:
    check-type-assertions: true
    check-blank: true

issues:
  exclude-rules:
    # Exclude some linters from running on tests files
    - path: _test\.go
      linters:
        - gosec
        - unparam
    # Exclude gosec from main.go for environment variable usage
    - path: main\.go
      linters:
        - gosec
      text: "G104:" # Ignore unhandled errors for log output