add workflow checks

Signed-off-by: Benjamin Wang <wachao@vmware.com>

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+

.github/workflows/static-analysis.yaml

@@ -0,0 +1,20 @@
+name: Static Analysis
+on: [push, pull_request]
+permissions: read-all
+jobs:
+  goversion:
+    uses: ./.github/workflows/go-version.yaml
+  run:
+    runs-on: ubuntu-latest
+    needs: goversion
+    steps:
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+      - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0
+        with:
+          go-version: ${{ needs.goversion.outputs.goversion }}
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 # v3.4.0
+        with:
+          version: v1.49.0
+      - run: make fmt
+

Makefile

@@ -0,0 +1,15 @@
+
+GOFILES = $(shell find . -name \*.go)
+
+.PHONY: fmt
+fmt:
+	@echo "Verifying gofmt, failures can be fixed with ./scripts/fix.sh"
+	@!(gofmt -l -s -d ${GOFILES} | grep '[a-z]')
+
+	@echo "Verifying goimports, failures can be fixed with ./scripts/fix.sh"
+	@!(go run golang.org/x/tools/cmd/goimports@latest -l -d ${GOFILES} | grep '[a-z]')
+
+.PHONY: lint
+lint:
+	golangci-lint run ./...
+