Don't explode grants from the DB #4970

	name: "golangci-lint"

	on:
	pull_request:
	paths-ignore:
	- 'website/**'

	permissions:
	contents: read

	jobs:
	lint:
	name: "Run Linter"
	runs-on: ${{ fromJSON(vars.RUNNER) }}
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	with:
	fetch-depth: '0'
	- name: Determine Go version
	id: get-go-version
	# We use .go-version as our source of truth for current Go
	# version, because "goenv" can react to it automatically.
	run: \|
	echo "Building with Go $(cat .go-version)"
	echo "go-version=$(cat .go-version)" >> "$GITHUB_OUTPUT"
	- name: Set up Go
	uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version: "${{ steps.get-go-version.outputs.go-version }}"
	- name: Install Dependencies
	# if we really need to we can update this to run `make tools`
	# later but its just not necessary to only run linters
	run: \|
	make golangci-lint
	- name: Running Linters
	run: \|
	LINT_DIFF_BRANCH="origin/${GITHUB_BASE_REF}" make lint-diff

Provide feedback