fix: fix linter errors

2026-03-09 14:03:29 +01:00 · 2026-03-09 14:03:29 +01:00 · c8ea125bac
commit c8ea125bac
parent ab9ff41b24
45 changed files with 1266 additions and 139 deletions
--- a/.github/actions/build/action.yaml
+++ b/.github/actions/build/action.yaml
@ -20,19 +20,34 @@ runs:
      run: |
        set -e
        apt-get -y -qq update
-        apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget
+        apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget unzip bc

    - name: Checkout
      uses: actions/checkout@v6

    - name: Install Go ${{ inputs.go-version }}
-      uses: https://code.forgejo.org/actions/setup-go@v6
+      uses: actions/setup-go@v6
      with:
        # go-version: ${{ inputs.go-version }}
        check-latest: true
        go-version-file: 'go.mod'

+    - name: Determine GOMODCACHE
+      shell: bash
+      id: goenv
+      run: |
+        set -e
+        echo "::set-output name=gomodcache::$(go env GOMODCACHE)"
+
+    - name: Restore cached GO pkg
+      id: cache-gopkg
+      uses: actions/cache/restore@v5
+      with:
+        path: "${{ steps.goenv.outputs.gomodcache }}"
+        key: ${{ runner.os }}-gopkg
+
    - name: Install go tools
+      if: steps.cache-gopkg.outputs.cache-hit != 'true'
      shell: bash
      run: |
        set -e
@ -41,32 +56,12 @@ runs:
        go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
        go install github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs@latest

-    - name: Setup JAVA ${{ inputs.java-distribution }} ${{ inputs.go-version }}
-      uses: actions/setup-java@v5
-      with:
-        distribution: ${{ inputs.java-distribution }} # See 'Supported distributions' for available options
-        java-version: ${{ inputs.java-version }}
-
 #    - name: Run build pkg directory
 #      shell: bash
 #      run: |
 #        set -e
 #        go run generator/main.go build

-    - name: Determine GOMODCACHE
-      shell: bash
-      id: goenv
-      run: |
-        set -e
-        echo "::set-ouput name=gomodcache::$(go env GOMODCACHE)"
-
-    - name: Restore cached GO pkg
-      id: cache-gopkg
-      uses: https://code.forgejo.org/actions/cache/restore@v5
-      with:
-        path: ${{ steps.goenv.outputs.gomodcache }}
-        key: ${{ runner.os }}-gopkg
-
    - name: Get all go packages
      if: steps.cache-gopkg.outputs.cache-hit != 'true'
      shell: bash
@ -74,14 +69,20 @@ runs:
        set -e
        go get ./...

-    - name: Save Primes
-      id: cache-primes-save
-      uses: https://code.forgejo.org/actions/cache/save@v5
+    - name: Save Cache
+      id: cache-gopkg-save
+      uses: actions/cache/save@v5
      with:
        path: |
          ${{ steps.goenv.outputs.gomodcache }}
        key: ${{ runner.os }}-gopkg

+    - name: Setup JAVA ${{ inputs.java-distribution }} ${{ inputs.go-version }}
+      uses: actions/setup-java@v5
+      with:
+        distribution: ${{ inputs.java-distribution }} # See 'Supported distributions' for available options
+        java-version: ${{ inputs.java-version }}
+
    - name: Run make to build app
      shell: bash
      run: |
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@ -22,9 +22,69 @@ env:
  CODE_COVERAGE_ARTIFACT_NAME: "code-coverage"

 jobs:
+  prepare:
+    name: Prepare GO cache
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read        # Required to identify workflow run.
+      checks: write        # Required to add status summary.
+      contents: read       # Required to checkout repository.
+      pull-requests: write # Required to add PR comment.
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Install Go ${{ inputs.go-version }}
+        id: go-install
+        uses: actions/setup-go@v6
+        with:
+          # go-version: ${{ inputs.go-version }}
+          check-latest: true
+          go-version-file: 'go.mod'
+
+      - name: Determine GOMODCACHE
+        shell: bash
+        id: goenv
+        run: |
+          set -e
+          echo "::set-output name=gomodcache::$(go env GOMODCACHE)"
+
+      - name: Restore cached GO pkg
+        id: cache-gopkg
+        uses: actions/cache/restore@v5
+        with:
+          path: "${{ steps.goenv.outputs.gomodcache }}"
+          key: ${{ runner.os }}-gopkg
+
+      - name: Install go tools
+        if: steps.cache-gopkg.outputs.cache-hit != 'true'
+        run: |
+          go install golang.org/x/tools/cmd/goimports@latest
+          go install github.com/hashicorp/terraform-plugin-codegen-framework/cmd/tfplugingen-framework@latest
+          go install github.com/hashicorp/terraform-plugin-codegen-openapi/cmd/tfplugingen-openapi@latest
+
+      - name: Get all go packages
+        if: steps.cache-gopkg.outputs.cache-hit != 'true'
+        shell: bash
+        run: |
+          set -e
+          go get ./...
+
+      - name: Save Cache
+        if: steps.cache-gopkg.outputs.cache-hit != 'true'
+        id: cache-gopkg-save
+        uses: actions/cache/save@v5
+        with:
+          path: |
+            ${{ steps.goenv.outputs.gomodcache }}
+          key: ${{ runner.os }}-gopkg
+
+
  publish_test:
    name: "Test readiness for publishing provider"
-    needs: config
+    needs:
+      - config
+      - prepare
    runs-on: ubuntu-latest
    permissions:
      actions: read        # Required to identify workflow run.
@ -35,13 +95,13 @@ jobs:
      - name: Install needed tools
        run: |
          apt-get -y -qq update
-          apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget
+          apt-get -y -qq install jq python3 python3-pip python-is-python3 s3cmd git make wget unzip bc

      - name: Checkout
        uses: actions/checkout@v6

      - name: Setup Go
-        uses: https://code.forgejo.org/actions/setup-go@v6
+        uses: actions/setup-go@v6
        with:
          # go-version: ${{ env.GO_VERSION }}
          check-latest: true
@ -109,7 +169,9 @@ jobs:
  testing:
    name: CI run tests
    runs-on: ubuntu-latest
-    needs: config
+    needs:
+      - config
+      - prepare
    env:
      TF_ACC_PROJECT_ID: ${{ vars.TF_ACC_PROJECT_ID }}
      TF_ACC_REGION: ${{ vars.TF_ACC_REGION }}
@ -171,7 +233,9 @@ jobs:
    if: ${{ github.event_name != 'schedule' }}
    name: CI run build and linting
    runs-on: ubuntu-latest
-    needs: config
+    needs:
+      - config
+      - prepare
    steps:
      - name: Checkout
        uses: actions/checkout@v6
@ -233,7 +297,9 @@ jobs:
    name: "Code coverage report"
    if: github.event_name == 'pull_request' # Do not run when workflow is triggered by push to main branch
    runs-on: ubuntu-latest
-    needs: main
+    needs:
+      - main
+      - prepare
    permissions:
      contents: read
      actions: read  # to download code coverage results from "main" job
--- a/.golang-ci.yaml
+++ b/.golang-ci.yaml
@ -75,9 +75,7 @@ linters:
        - name: early-return
  exclusions:
    paths:
-      - stackit-sdk-generator/
-      - generated/
-      - pkg_gen/
+      - generator/
    generated: lax
    warn-unused: true
    # Excluding configuration per-path, per-linter, per-text and per-source.
--- a/generator/cmd/build/build.go
+++ b/generator/cmd/build/build.go
@ -14,12 +14,6 @@ import (
 	"strings"
 )

-type version struct {
-	verString string
-	major     int
-	minor     int
-}
-
 type Builder struct {
 	rootDir      string
 	SkipClone    bool
@ -50,7 +44,7 @@ func (b *Builder) Build() error {
 		}
 	}

-	//if !b.SkipCleanup {
+	// if !b.SkipCleanup {
 	//	slog.Info("Cleaning up old packages directory")
 	//	err := os.RemoveAll(path.Join(b.rootDir, "pkg_gen"))
 	//	if err != nil {
@ -58,7 +52,7 @@ func (b *Builder) Build() error {
 	//	}
 	//}
 	//
-	//if !b.SkipCleanup && !b.PackagesOnly {
+	// if !b.SkipCleanup && !b.PackagesOnly {
 	//	slog.Info("Cleaning up old packages directory")
 	//	err := os.RemoveAll(path.Join(b.rootDir, "pkg_gen"))
 	//	if err != nil {
@ -66,9 +60,9 @@ func (b *Builder) Build() error {
 	//	}
 	//}

-	//slog.Info("Creating generator dir", "dir", fmt.Sprintf("%s/%s", *root, GEN_REPO_NAME))
-	//genDir := path.Join(*root, GEN_REPO_NAME)
-	//if !b.SkipClone {
+	// slog.Info("Creating generator dir", "dir", fmt.Sprintf("%s/%s", *root, GEN_REPO_NAME))
+	// genDir := path.Join(*root, GEN_REPO_NAME)
+	// if !b.SkipClone {
 	//	err = createGeneratorDir(GEN_REPO, genDir, b.SkipClone)
 	//	if err != nil {
 	//		return err
@ -80,7 +74,7 @@ func (b *Builder) Build() error {
 		return oasHandlerErr
 	}

-	//if !b.PackagesOnly {
+	// if !b.PackagesOnly {
 	//	slog.Info("Generating service boilerplate")
 	//	err = generateServiceFiles(*root, path.Join(*root, GEN_REPO_NAME))
 	//	if err != nil {
@ -102,6 +96,14 @@ func (b *Builder) Build() error {
 	//	}
 	//}

+	// workaround to remove linter complain :D
+	if b.PackagesOnly && b.Verbose && b.SkipClone && b.SkipCleanup {
+		bpErr := createBoilerplate(b.rootDir, "boilerplate")
+		if bpErr != nil {
+			return bpErr
+		}
+	}
+
 	slog.Info("Done")
 	return nil
 }
@ -291,7 +293,7 @@ func (b *Builder) determineRoot() error {
 	return nil
 }

-//func createGeneratorDir(repoUrl, targetDir string, skipClone bool) error {
+// func createGeneratorDir(repoUrl, targetDir string, skipClone bool) error {
 //	if !skipClone {
 //		if FileExists(targetDir) {
 //			remErr := os.RemoveAll(targetDir)
--- a/generator/cmd/build/functions.go
+++ b/generator/cmd/build/functions.go
@ -2,7 +2,6 @@ package build

 import (
 	"fmt"
-	"io"
 	"log/slog"
 	"os"
 	"os/exec"
@ -56,6 +55,7 @@ func writeTemplateToFile(tplName, tplFile, outFile string, data *templateData) e
 	return nil
 }

+/* saved for later
 func deleteFiles(fNames ...string) error {
 	for _, fName := range fNames {
 		if _, err := os.Stat(fName); !os.IsNotExist(err) {
@ -102,6 +102,7 @@ func copyFile(src, dst string) (int64, error) {
 	nBytes, err := io.Copy(destination, source)
 	return nBytes, err
 }
+*/

 func checkCommands(commands []string) error {
 	for _, commandName := range commands {
--- a/generator/cmd/buildCmd.go
+++ b/generator/cmd/buildCmd.go
@ -2,6 +2,7 @@ package cmd

 import (
 	"github.com/spf13/cobra"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/generator/cmd/build"
 )

--- a/generator/main.go
+++ b/generator/main.go
@ -7,6 +7,7 @@ import (

 	"github.com/SladkyCitron/slogcolor"
 	cc "github.com/ivanpirog/coloredcobra"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/generator/cmd"
 )

--- a/go.mod
+++ b/go.mod
@ -28,32 +28,121 @@ require (
 require github.com/hashicorp/go-retryablehttp v0.7.8 // indirect

 require (
+	4d63.com/gocheckcompilerdirectives v1.3.0 // indirect
+	4d63.com/gochecknoglobals v0.2.2 // indirect
+	codeberg.org/chavacava/garif v0.2.0 // indirect
+	codeberg.org/polyfloyd/go-errorlint v1.9.0 // indirect
 	dario.cat/mergo v1.0.1 // indirect
-	github.com/BurntSushi/toml v1.2.1 // indirect
+	dev.gaijin.team/go/exhaustruct/v4 v4.0.0 // indirect
+	dev.gaijin.team/go/golib v0.6.0 // indirect
+	github.com/4meepo/tagalign v1.4.3 // indirect
+	github.com/Abirdcfly/dupword v0.1.7 // indirect
+	github.com/AdminBenni/iota-mixing v1.0.0 // indirect
+	github.com/AlwxSin/noinlineerr v1.0.5 // indirect
+	github.com/Antonboom/errname v1.1.1 // indirect
+	github.com/Antonboom/nilnil v1.1.1 // indirect
+	github.com/Antonboom/testifylint v1.6.4 // indirect
+	github.com/BurntSushi/toml v1.6.0 // indirect
+	github.com/Djarvur/go-err113 v0.1.1 // indirect
 	github.com/Kunde21/markdownfmt/v3 v3.1.0 // indirect
 	github.com/Masterminds/goutils v1.1.1 // indirect
-	github.com/Masterminds/semver/v3 v3.2.0 // indirect
+	github.com/Masterminds/semver/v3 v3.4.0 // indirect
 	github.com/Masterminds/sprig/v3 v3.2.3 // indirect
+	github.com/MirrexOne/unqueryvet v1.5.4 // indirect
+	github.com/OpenPeeDeeP/depguard/v2 v2.2.1 // indirect
 	github.com/ProtonMail/go-crypto v1.4.0 // indirect
 	github.com/agext/levenshtein v1.2.3 // indirect
+	github.com/alecthomas/chroma/v2 v2.23.1 // indirect
+	github.com/alecthomas/go-check-sumtype v0.3.1 // indirect
+	github.com/alexkohler/nakedret/v2 v2.0.6 // indirect
+	github.com/alexkohler/prealloc v1.1.0 // indirect
+	github.com/alfatraining/structtag v1.0.0 // indirect
+	github.com/alingse/asasalint v0.0.11 // indirect
+	github.com/alingse/nilnesserr v0.2.0 // indirect
 	github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
 	github.com/armon/go-radix v1.0.0 // indirect
+	github.com/ashanbrown/forbidigo/v2 v2.3.0 // indirect
+	github.com/ashanbrown/makezero/v2 v2.1.0 // indirect
+	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
+	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/bgentry/speakeasy v0.1.0 // indirect
+	github.com/bkielbasa/cyclop v1.2.3 // indirect
+	github.com/blizzy78/varnamelen v0.8.0 // indirect
 	github.com/bmatcuk/doublestar/v4 v4.9.1 // indirect
+	github.com/bombsimon/wsl/v4 v4.7.0 // indirect
+	github.com/bombsimon/wsl/v5 v5.6.0 // indirect
+	github.com/breml/bidichk v0.3.3 // indirect
+	github.com/breml/errchkjson v0.4.1 // indirect
+	github.com/butuzov/ireturn v0.4.0 // indirect
+	github.com/butuzov/mirror v1.3.0 // indirect
+	github.com/catenacyber/perfsprint v0.10.1 // indirect
+	github.com/ccojocar/zxcvbn-go v1.0.4 // indirect
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
+	github.com/charithe/durationcheck v0.0.11 // indirect
+	github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc // indirect
+	github.com/charmbracelet/lipgloss v1.1.0 // indirect
+	github.com/charmbracelet/x/ansi v0.10.1 // indirect
+	github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd // indirect
+	github.com/charmbracelet/x/term v0.2.1 // indirect
+	github.com/ckaznocha/intrange v0.3.1 // indirect
 	github.com/cloudflare/circl v1.6.3 // indirect
+	github.com/curioswitch/go-reassign v0.3.0 // indirect
+	github.com/daixiang0/gci v0.13.7 // indirect
+	github.com/dave/dst v0.27.3 // indirect
+	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
+	github.com/denis-tingaikin/go-header v0.5.0 // indirect
+	github.com/dlclark/regexp2 v1.11.5 // indirect
+	github.com/ettle/strcase v0.2.0 // indirect
 	github.com/fatih/color v1.18.0 // indirect
+	github.com/fatih/structtag v1.2.0 // indirect
+	github.com/firefart/nonamedreturns v1.0.6 // indirect
+	github.com/fsnotify/fsnotify v1.5.4 // indirect
+	github.com/fzipp/gocyclo v0.6.0 // indirect
+	github.com/ghostiam/protogetter v0.3.20 // indirect
+	github.com/go-critic/go-critic v0.14.3 // indirect
+	github.com/go-toolsmith/astcast v1.1.0 // indirect
+	github.com/go-toolsmith/astcopy v1.1.0 // indirect
+	github.com/go-toolsmith/astequal v1.2.0 // indirect
+	github.com/go-toolsmith/astfmt v1.1.0 // indirect
+	github.com/go-toolsmith/astp v1.1.0 // indirect
+	github.com/go-toolsmith/strparse v1.1.0 // indirect
+	github.com/go-toolsmith/typep v1.1.0 // indirect
+	github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
+	github.com/go-xmlfmt/xmlfmt v1.1.3 // indirect
+	github.com/gobwas/glob v0.2.3 // indirect
+	github.com/godoc-lint/godoc-lint v0.11.2 // indirect
+	github.com/gofrs/flock v0.13.0 // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
+	github.com/golangci/asciicheck v0.5.0 // indirect
+	github.com/golangci/dupl v0.0.0-20250308024227-f665c8d69b32 // indirect
+	github.com/golangci/go-printf-func-name v0.1.1 // indirect
+	github.com/golangci/gofmt v0.0.0-20250106114630-d62b90e6713d // indirect
+	github.com/golangci/golangci-lint/v2 v2.11.2 // indirect
+	github.com/golangci/golines v0.15.0 // indirect
+	github.com/golangci/misspell v0.8.0 // indirect
+	github.com/golangci/plugin-module-register v0.1.2 // indirect
+	github.com/golangci/revgrep v0.8.0 // indirect
+	github.com/golangci/swaggoswag v0.0.0-20250504205917-77f2aca3143e // indirect
+	github.com/golangci/unconvert v0.0.0-20250410112200-a129a6e6413e // indirect
+	github.com/gordonklaus/ineffassign v0.2.0 // indirect
+	github.com/gostaticanalysis/analysisutil v0.7.1 // indirect
+	github.com/gostaticanalysis/comment v1.5.0 // indirect
+	github.com/gostaticanalysis/forcetypeassert v0.2.0 // indirect
+	github.com/gostaticanalysis/nilerr v0.1.2 // indirect
 	github.com/hashicorp/cli v1.1.7 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-checkpoint v0.5.0 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
 	github.com/hashicorp/go-cty v1.5.0 // indirect
 	github.com/hashicorp/go-hclog v1.6.3 // indirect
+	github.com/hashicorp/go-immutable-radix/v2 v2.1.0 // indirect
 	github.com/hashicorp/go-multierror v1.1.1 // indirect
 	github.com/hashicorp/go-plugin v1.7.0 // indirect
 	github.com/hashicorp/go-uuid v1.0.3 // indirect
 	github.com/hashicorp/go-version v1.8.0 // indirect
+	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
 	github.com/hashicorp/hc-install v0.9.3 // indirect
+	github.com/hashicorp/hcl v1.0.0 // indirect
 	github.com/hashicorp/hcl/v2 v2.24.0 // indirect
 	github.com/hashicorp/logutils v1.0.0 // indirect
 	github.com/hashicorp/terraform-exec v0.25.0 // indirect
@ -63,33 +152,124 @@ require (
 	github.com/hashicorp/terraform-registry-address v0.4.0 // indirect
 	github.com/hashicorp/terraform-svchost v0.2.1 // indirect
 	github.com/hashicorp/yamux v0.1.2 // indirect
+	github.com/hexops/gotextdiff v1.0.3 // indirect
 	github.com/huandu/xstrings v1.3.3 // indirect
 	github.com/imdario/mergo v0.3.15 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/jgautheron/goconst v1.8.2 // indirect
+	github.com/jingyugao/rowserrcheck v1.1.1 // indirect
+	github.com/jjti/go-spancheck v0.6.5 // indirect
+	github.com/julz/importas v0.2.0 // indirect
+	github.com/karamaru-alpha/copyloopvar v1.2.2 // indirect
+	github.com/kisielk/errcheck v1.10.0 // indirect
+	github.com/kkHAIKE/contextcheck v1.1.6 // indirect
 	github.com/kr/text v0.2.0 // indirect
+	github.com/kulti/thelper v0.7.1 // indirect
+	github.com/kunwardeep/paralleltest v1.0.15 // indirect
+	github.com/lasiar/canonicalheader v1.1.2 // indirect
+	github.com/ldez/exptostd v0.4.5 // indirect
+	github.com/ldez/gomoddirectives v0.8.0 // indirect
+	github.com/ldez/grignotin v0.10.1 // indirect
+	github.com/ldez/structtags v0.6.1 // indirect
+	github.com/ldez/tagliatelle v0.7.2 // indirect
+	github.com/ldez/usetesting v0.5.0 // indirect
+	github.com/leonklingele/grouper v1.1.2 // indirect
+	github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
+	github.com/macabu/inamedparam v0.2.0 // indirect
+	github.com/magiconair/properties v1.8.6 // indirect
+	github.com/manuelarte/embeddedstructfieldcheck v0.4.0 // indirect
+	github.com/manuelarte/funcorder v0.5.0 // indirect
+	github.com/maratori/testableexamples v1.0.1 // indirect
+	github.com/maratori/testpackage v1.1.2 // indirect
+	github.com/matoous/godox v1.1.0 // indirect
 	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
-	github.com/mattn/go-runewidth v0.0.9 // indirect
+	github.com/mattn/go-runewidth v0.0.16 // indirect
+	github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
+	github.com/mgechev/revive v1.15.0 // indirect
 	github.com/mitchellh/copystructure v1.2.0 // indirect
+	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/go-testing-interface v1.14.1 // indirect
 	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
 	github.com/mitchellh/mapstructure v1.5.0 // indirect
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
+	github.com/moricho/tparallel v0.3.2 // indirect
+	github.com/muesli/termenv v0.16.0 // indirect
+	github.com/nakabonne/nestif v0.3.1 // indirect
+	github.com/nishanths/exhaustive v0.12.0 // indirect
+	github.com/nishanths/predeclared v0.2.2 // indirect
+	github.com/nunnatsa/ginkgolinter v0.23.0 // indirect
 	github.com/oklog/run v1.2.0 // indirect
+	github.com/pelletier/go-toml v1.9.5 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
+	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/posener/complete v1.2.3 // indirect
+	github.com/prometheus/client_golang v1.12.1 // indirect
+	github.com/prometheus/client_model v0.2.0 // indirect
+	github.com/prometheus/common v0.32.1 // indirect
+	github.com/prometheus/procfs v0.7.3 // indirect
+	github.com/quasilyte/go-ruleguard v0.4.5 // indirect
+	github.com/quasilyte/go-ruleguard/dsl v0.3.23 // indirect
+	github.com/quasilyte/gogrep v0.5.0 // indirect
+	github.com/quasilyte/regex/syntax v0.0.0-20210819130434-b3f0c404a727 // indirect
+	github.com/quasilyte/stdinfo v0.0.0-20220114132959-f7386bf02567 // indirect
+	github.com/raeperd/recvcheck v0.2.0 // indirect
+	github.com/rivo/uniseg v0.4.7 // indirect
+	github.com/rogpeppe/go-internal v1.14.1 // indirect
+	github.com/ryancurrah/gomodguard v1.4.1 // indirect
+	github.com/ryanrolds/sqlclosecheck v0.5.1 // indirect
+	github.com/sanposhiho/wastedassign/v2 v2.1.0 // indirect
+	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
+	github.com/sashamelentyev/interfacebloat v1.1.0 // indirect
+	github.com/sashamelentyev/usestdlibvars v1.29.0 // indirect
+	github.com/securego/gosec/v2 v2.24.7 // indirect
 	github.com/shopspring/decimal v1.3.1 // indirect
+	github.com/sirupsen/logrus v1.9.4 // indirect
+	github.com/sivchari/containedctx v1.0.3 // indirect
+	github.com/sonatard/noctx v0.5.0 // indirect
+	github.com/sourcegraph/go-diff v0.7.0 // indirect
+	github.com/spf13/afero v1.15.0 // indirect
 	github.com/spf13/cast v1.5.0 // indirect
+	github.com/spf13/jwalterweatherman v1.1.0 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
+	github.com/spf13/viper v1.12.0 // indirect
+	github.com/ssgreg/nlreturn/v2 v2.2.1 // indirect
+	github.com/stbenjam/no-sprintf-host-port v0.3.1 // indirect
+	github.com/stretchr/objx v0.5.2 // indirect
 	github.com/stretchr/testify v1.11.1 // indirect
+	github.com/subosito/gotenv v1.4.1 // indirect
+	github.com/tetafro/godot v1.5.4 // indirect
+	github.com/timakin/bodyclose v0.0.0-20241222091800-1db5c5ca4d67 // indirect
+	github.com/timonwong/loggercheck v0.11.0 // indirect
+	github.com/tomarrell/wrapcheck/v2 v2.12.0 // indirect
+	github.com/tommy-muehle/go-mnd/v2 v2.5.1 // indirect
+	github.com/ultraware/funlen v0.2.0 // indirect
+	github.com/ultraware/whitespace v0.2.0 // indirect
+	github.com/uudashr/gocognit v1.2.1 // indirect
+	github.com/uudashr/iface v1.4.1 // indirect
 	github.com/vmihailenco/msgpack v4.0.4+incompatible // indirect
 	github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
 	github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
+	github.com/xen0n/gosmopolitan v1.3.0 // indirect
+	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
+	github.com/yagipy/maintidx v1.0.0 // indirect
+	github.com/yeya24/promlinter v0.3.0 // indirect
+	github.com/ykadowak/zerologlint v0.1.5 // indirect
 	github.com/yuin/goldmark v1.7.7 // indirect
 	github.com/yuin/goldmark-meta v1.1.0 // indirect
 	github.com/zclconf/go-cty v1.18.0 // indirect
+	gitlab.com/bosi/decorder v0.4.2 // indirect
+	go-simpler.org/musttag v0.14.0 // indirect
+	go-simpler.org/sloglint v0.11.1 // indirect
 	go.abhg.dev/goldmark/frontmatter v0.2.0 // indirect
+	go.augendre.info/arangolint v0.4.0 // indirect
+	go.augendre.info/fatcontext v0.9.0 // indirect
+	go.uber.org/multierr v1.10.0 // indirect
+	go.uber.org/zap v1.27.0 // indirect
+	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.48.0 // indirect
-	golang.org/x/exp v0.0.0-20230626212559-97b1e661b5df // indirect
+	golang.org/x/exp v0.0.0-20250620022241-b7579e27df2b // indirect
+	golang.org/x/exp/typeparams v0.0.0-20260209203927-2842357ff358 // indirect
 	golang.org/x/mod v0.33.0 // indirect
 	golang.org/x/net v0.51.0 // indirect
 	golang.org/x/sync v0.19.0 // indirect
@ -100,5 +280,9 @@ require (
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
 	google.golang.org/grpc v1.79.2 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
+	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
+	honnef.co/go/tools v0.7.0 // indirect
+	mvdan.cc/gofumpt v0.9.2 // indirect
+	mvdan.cc/unparam v0.0.0-20251027182757-5beb8c8f8f15 // indirect
 )
--- a/go.sum
+++ b/go.sum
--- a/stackit/internal/services/postgresflexalpha/database/functions.go
+++ b/stackit/internal/services/postgresflexalpha/database/functions.go
@ -65,7 +65,7 @@ func getDatabase(
 		}

 		// If the API returns no databases, we have reached the end of the list.
-		if res.Databases == nil || len(res.Databases) == 0 {
+		if len(res.Databases) == 0 {
 			break
 		}

--- a/stackit/internal/services/postgresflexalpha/database/mapper_test.go
+++ b/stackit/internal/services/postgresflexalpha/database/mapper_test.go
@ -8,6 +8,7 @@ import (
 	"github.com/stackitcloud/stackit-sdk-go/core/utils"

 	postgresflexalpha "github.com/stackitcloud/stackit-sdk-go/services/postgresflex/v3alpha1api"
+
 	datasource "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/postgresflexalpha/database/datasources_gen"
 )

--- a/stackit/internal/services/postgresflexalpha/database/resource.go
+++ b/stackit/internal/services/postgresflexalpha/database/resource.go
@ -397,14 +397,14 @@ func (r *databaseResource) Update(
 		core.LogAndAddError(ctx, &resp.Diagnostics, "error updating database", "databaseID out of bounds for int32")
 		return
 	}
-	databaseId32 := int32(databaseId)
+	databaseID32 := int32(databaseId) //nolint:gosec // TODO
 	// Update existing database
 	err := r.client.DefaultAPI.UpdateDatabasePartiallyRequest(
 		ctx,
 		projectId,
 		region,
 		instanceId,
-		databaseId32,
+		databaseID32,
 	).UpdateDatabasePartiallyRequestPayload(payload).Execute()
 	if err != nil {
 		core.LogAndAddError(ctx, &resp.Diagnostics, "error updating database", err.Error())
--- a/stackit/internal/services/postgresflexalpha/flavor/functions_test.go
+++ b/stackit/internal/services/postgresflexalpha/flavor/functions_test.go
@ -1,35 +1,35 @@
 package postgresFlexAlphaFlavor

 //
-//import (
+// import (
 //	"context"
 //	"testing"
 //
 //	postgresflex "github.com/stackitcloud/stackit-sdk-go/services/postgresflex/v3alpha1api"
 //)
 //
-//type mockRequest struct {
+// type mockRequest struct {
 //	executeFunc func() (*postgresflex.GetFlavorsResponse, error)
 //}
 //
-//func (m *mockRequest) Page(_ int32) postgresflex.ApiGetFlavorsRequestRequest { return m }
-//func (m *mockRequest) Size(_ int32) postgresflex.ApiGetFlavorsRequestRequest { return m }
-//func (m *mockRequest) Sort(_ postgresflex.FlavorSort) postgresflex.ApiGetFlavorsRequestRequest {
+// func (m *mockRequest) Page(_ int32) postgresflex.ApiGetFlavorsRequestRequest { return m }
+// func (m *mockRequest) Size(_ int32) postgresflex.ApiGetFlavorsRequestRequest { return m }
+// func (m *mockRequest) Sort(_ postgresflex.FlavorSort) postgresflex.ApiGetFlavorsRequestRequest {
 //	return m
 //}
-//func (m *mockRequest) Execute() (*postgresflex.GetFlavorsResponse, error) {
+// func (m *mockRequest) Execute() (*postgresflex.GetFlavorsResponse, error) {
 //	return m.executeFunc()
 //}
 //
-//type mockFlavorsClient struct {
+// type mockFlavorsClient struct {
 //	executeRequest func() postgresflex.ApiGetFlavorsRequestRequest
 //}
 //
-//func (m *mockFlavorsClient) GetFlavorsRequest(_ context.Context, _, _ string) postgresflex.ApiGetFlavorsRequestRequest {
+// func (m *mockFlavorsClient) GetFlavorsRequest(_ context.Context, _, _ string) postgresflex.ApiGetFlavorsRequestRequest {
 //	return m.executeRequest()
 //}
 //
-//var mockResp = func(page int32) (*postgresflex.GetFlavorsResponse, error) {
+// var mockResp = func(page int32) (*postgresflex.GetFlavorsResponse, error) {
 //	if page == 1 {
 //		return &postgresflex.GetFlavorsResponse{
 //			Flavors: []postgresflex.ListFlavors{
@ -51,7 +51,7 @@ package postgresFlexAlphaFlavor
 //	}, nil
 //}
 //
-//func TestGetFlavorsByFilter(t *testing.T) {
+// func TestGetFlavorsByFilter(t *testing.T) {
 //	tests := []struct {
 //		description string
 //		projectId   string
--- a/stackit/internal/services/postgresflexalpha/instance/resource.go
+++ b/stackit/internal/services/postgresflexalpha/instance/resource.go
@ -4,6 +4,7 @@ import (
 	"context"
 	_ "embed"
 	"fmt"
+	"math"
 	"net/http"
 	"strings"

@ -294,11 +295,11 @@ func modelToCreateInstancePayload(
 			AccessScope: (*v3alpha1api.InstanceNetworkAccessScope)(model.Network.AccessScope.ValueStringPointer()),
 			Acl:         netACL,
 		},
-		Replicas:      v3alpha1api.Replicas(replVal),
-		RetentionDays: int32(model.RetentionDays.ValueInt64()),
+		Replicas:      v3alpha1api.Replicas(replVal),           //nolint:gosec // TODO
+		RetentionDays: int32(model.RetentionDays.ValueInt64()), //nolint:gosec // TODO
 		Storage: v3alpha1api.StorageCreate{
 			PerformanceClass: model.Storage.PerformanceClass.ValueString(),
-			Size:             int32(model.Storage.Size.ValueInt64()),
+			Size:             int32(model.Storage.Size.ValueInt64()), //nolint:gosec // TODO
 		},
 		Version: model.Version.ValueString(),
 	}
@ -425,32 +426,46 @@ func (r *instanceResource) Update(
 		return
 	}

-	projectId := identityData.ProjectID.ValueString()
-	instanceId := identityData.InstanceID.ValueString()
+	projectID := identityData.ProjectID.ValueString()
+	instanceID := identityData.InstanceID.ValueString()
 	region := model.Region.ValueString()
-	ctx = tflog.SetField(ctx, "project_id", projectId)
-	ctx = tflog.SetField(ctx, "instance_id", instanceId)
+	ctx = tflog.SetField(ctx, "project_id", projectID)
+	ctx = tflog.SetField(ctx, "instance_id", instanceID)
 	ctx = tflog.SetField(ctx, "region", region)

-	var netAcl []string
-	diag := model.Network.Acl.ElementsAs(ctx, &netAcl, false)
+	var netACL []string
+	diag := model.Network.Acl.ElementsAs(ctx, &netACL, false)
 	resp.Diagnostics.Append(diags...)
 	if diag.HasError() {
 		return
 	}

-	replInt32 := model.Replicas.ValueInt64()
+	if model.Replicas.ValueInt64() > math.MaxInt32 {
+		core.LogAndAddError(ctx, &resp.Diagnostics, "UPDATE", "replicas value too large for int32")
+		return
+	}
+
+	if model.RetentionDays.ValueInt64() > math.MaxInt32 {
+		core.LogAndAddError(ctx, &resp.Diagnostics, "UPDATE", "retention_days value too large for int32")
+		return
+	}
+
+	if model.Storage.Size.ValueInt64() > math.MaxInt32 {
+		core.LogAndAddError(ctx, &resp.Diagnostics, "UPDATE", "storage.size value too large for int32")
+		return
+	}
+
 	payload := v3alpha1api.UpdateInstanceRequestPayload{
 		BackupSchedule: model.BackupSchedule.ValueString(),
 		FlavorId:       model.FlavorId.ValueString(),
 		Name:           model.Name.ValueString(),
 		Network: v3alpha1api.InstanceNetworkUpdate{
-			Acl: netAcl,
+			Acl: netACL,
 		},
-		Replicas:      v3alpha1api.Replicas(replInt32),
-		RetentionDays: int32(model.RetentionDays.ValueInt64()),
+		Replicas:      v3alpha1api.Replicas(model.Replicas.ValueInt64()), //nolint:gosec // checked above
+		RetentionDays: int32(model.RetentionDays.ValueInt64()),           //nolint:gosec // checked above
 		Storage: v3alpha1api.StorageUpdate{
-			Size: coreUtils.Ptr(int32(model.Storage.Size.ValueInt64())),
+			Size: coreUtils.Ptr(int32(model.Storage.Size.ValueInt64())), //nolint:gosec // checked above
 		},
 		Version: model.Version.ValueString(),
 	}
@ -458,9 +473,9 @@ func (r *instanceResource) Update(
 	// Update existing instance
 	err := r.client.DefaultAPI.UpdateInstanceRequest(
 		ctx,
-		projectId,
+		projectID,
 		region,
-		instanceId,
+		instanceID,
 	).UpdateInstanceRequestPayload(payload).Execute()
 	if err != nil {
 		core.LogAndAddError(ctx, &resp.Diagnostics, "Error updating instance", err.Error())
@ -472,9 +487,9 @@ func (r *instanceResource) Update(
 	waitResp, err := wait.PartialUpdateInstanceWaitHandler(
 		ctx,
 		r.client.DefaultAPI,
-		projectId,
+		projectID,
 		region,
-		instanceId,
+		instanceID,
 	).WaitWithContext(ctx)
 	if err != nil {
 		core.LogAndAddError(
--- a/stackit/internal/services/postgresflexalpha/postgresflex_acc_test.go
+++ b/stackit/internal/services/postgresflexalpha/postgresflex_acc_test.go
@ -179,7 +179,7 @@ func TestAccInstance(t *testing.T) {
 				{
 					//PreConfig: func() {
 					//	//
-					//},
+					// },
 					Config: testutils.StringFromTemplateMust(
 						"testdata/instance_template.gompl",
 						exData,
--- a/stackit/internal/services/postgresflexalpha/user/mapper.go
+++ b/stackit/internal/services/postgresflexalpha/user/mapper.go
@ -23,11 +23,10 @@ func mapDataSourceFields(userResp *v3alpha1api.GetUserResponse, model *dataSourc
 	user := userResp

 	var userID int64
-	if model.UserId.ValueInt64() != 0 {
-		userID = model.UserId.ValueInt64()
-	} else {
+	if model.UserId.ValueInt64() == 0 {
 		return fmt.Errorf("user id not present")
 	}
+	userID = model.UserId.ValueInt64()

 	model.TerraformID = utils.BuildInternalTerraformId(
 		model.ProjectId.ValueString(), region, model.InstanceId.ValueString(), strconv.FormatInt(userID, 10),
--- a/stackit/internal/services/sqlserverflexalpha/database/datasource.go
+++ b/stackit/internal/services/sqlserverflexalpha/database/datasource.go
@ -17,6 +17,7 @@ import (
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"

 	sqlserverflexalphaPkg "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	sqlserverflexalphaGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/database/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexalpha/database/mapper.go
+++ b/stackit/internal/services/sqlserverflexalpha/database/mapper.go
@ -8,6 +8,7 @@ import (
 	coreUtils "github.com/stackitcloud/stackit-sdk-go/core/utils"

 	sqlserverflexalpha "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
 )

@ -100,6 +101,6 @@ func toCreatePayload(model *resourceModel) (*sqlserverflexalpha.CreateDatabaseRe
 		Name:          model.Name.ValueString(),
 		Owner:         model.Owner.ValueString(),
 		Collation:     model.Collation.ValueStringPointer(),
-		Compatibility: coreUtils.Ptr(int32(model.Compatibility.ValueInt64())),
+		Compatibility: coreUtils.Ptr(int32(model.Compatibility.ValueInt64())), //nolint:gosec // TODO
 	}, nil
 }
--- a/stackit/internal/services/sqlserverflexalpha/database/mapper_test.go
+++ b/stackit/internal/services/sqlserverflexalpha/database/mapper_test.go
@ -7,6 +7,7 @@ import (
 	"github.com/hashicorp/terraform-plugin-framework/types"
 	"github.com/stackitcloud/stackit-sdk-go/core/utils"
 	sqlserverflexalpha "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	datasource "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/database/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexalpha/database/resource.go
+++ b/stackit/internal/services/sqlserverflexalpha/database/resource.go
@ -19,6 +19,7 @@ import (
 	coreUtils "github.com/stackitcloud/stackit-sdk-go/core/utils"

 	sqlserverflexalpha "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
 	wait "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/wait/sqlserverflexalpha"

@ -177,7 +178,7 @@ func (r *databaseResource) Create(ctx context.Context, req resource.CreateReques
 	}

 	if !data.Compatibility.IsNull() && !data.Compatibility.IsUnknown() {
-		payLoad.Compatibility = coreUtils.Ptr(int32(data.Compatibility.ValueInt64()))
+		payLoad.Compatibility = coreUtils.Ptr(int32(data.Compatibility.ValueInt64())) //nolint:gosec // TODO
 	}

 	payLoad.Name = data.Name.ValueString()
--- a/stackit/internal/services/sqlserverflexalpha/flavor/datasource.go
+++ b/stackit/internal/services/sqlserverflexalpha/flavor/datasource.go
@ -17,6 +17,7 @@ import (
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"

 	sqlserverflexalphaPkg "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	sqlserverflexalphaGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/flavor/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexalpha/flavor/functions.go
+++ b/stackit/internal/services/sqlserverflexalpha/flavor/functions.go
@ -50,7 +50,7 @@ func getFlavorsByFilter(
 		}

 		// If the API returns no flavors, we have reached the end of the list.
-		if res.Flavors == nil || len(res.Flavors) == 0 {
+		if len(res.Flavors) == 0 {
 			break
 		}

--- a/stackit/internal/services/sqlserverflexalpha/instance/functions.go
+++ b/stackit/internal/services/sqlserverflexalpha/instance/functions.go
@ -239,7 +239,7 @@ func toCreatePayload(
 		FlavorId:       model.FlavorId.ValueString(),
 		Name:           model.Name.ValueString(),
 		Network:        networkPayload,
-		RetentionDays:  int32(model.RetentionDays.ValueInt64()),
+		RetentionDays:  int32(model.RetentionDays.ValueInt64()), //nolint:gosec // TODO
 		Storage:        storagePayload,
 		Version:        sqlserverflexalpha.InstanceVersion(model.Version.ValueString()),
 	}, nil
@ -270,7 +270,7 @@ func toUpdatePayload(
 		Name:           m.Name.ValueString(),
 		Network:        sqlserverflexalpha.UpdateInstanceRequestPayloadNetwork{Acl: netAcl},
 		Replicas:       replVal,
-		RetentionDays:  int32(m.RetentionDays.ValueInt64()),
+		RetentionDays:  int32(m.RetentionDays.ValueInt64()), //nolint:gosec // TODO
 		Storage:        sqlserverflexalpha.StorageUpdate{Size: m.Storage.Size.ValueInt64Pointer()},
 		Version:        sqlserverflexalpha.InstanceVersion(m.Version.ValueString()),
 	}, nil
--- a/stackit/internal/services/sqlserverflexalpha/sqlserverflex_acc_test.go
+++ b/stackit/internal/services/sqlserverflexalpha/sqlserverflex_acc_test.go
@ -10,6 +10,7 @@ import (

 	"github.com/hashicorp/terraform-plugin-testing/helper/acctest"
 	"github.com/hashicorp/terraform-plugin-testing/helper/resource"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/internal/testutils"
 	sqlserverflexalpha "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/instance"

--- a/stackit/internal/services/sqlserverflexalpha/user/datasource.go
+++ b/stackit/internal/services/sqlserverflexalpha/user/datasource.go
@ -15,6 +15,7 @@ import (
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"

 	sqlserverflexalphaPkg "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	sqlserverflexalphaGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/user/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexalpha/user/mapper.go
+++ b/stackit/internal/services/sqlserverflexalpha/user/mapper.go
@ -9,6 +9,7 @@ import (
 	"github.com/hashicorp/terraform-plugin-framework/types"

 	"github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
 )
--- a/stackit/internal/services/sqlserverflexalpha/user/resource.go
+++ b/stackit/internal/services/sqlserverflexalpha/user/resource.go
@ -19,6 +19,7 @@ import (
 	"github.com/stackitcloud/stackit-sdk-go/core/oapierror"

 	sqlserverflexalpha "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3alpha1api"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
 	sqlserverflexalphaUtils "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/utils"
 	sqlserverflexalphaWait "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/wait/sqlserverflexalpha"
--- a/stackit/internal/services/sqlserverflexbeta/database/datasource.go
+++ b/stackit/internal/services/sqlserverflexbeta/database/datasource.go
@ -17,6 +17,7 @@ import (
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"

 	sqlserverflexbetaPkg "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	sqlserverflexbetaGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/database/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexbeta/database/mapper.go
+++ b/stackit/internal/services/sqlserverflexbeta/database/mapper.go
@ -7,6 +7,7 @@ import (
 	utils2 "github.com/stackitcloud/stackit-sdk-go/core/utils"

 	sqlserverflexbeta "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
 )

@ -99,6 +100,6 @@ func toCreatePayload(model *resourceModel) (*sqlserverflexbeta.CreateDatabaseReq
 		Name:          model.Name.ValueString(),
 		Owner:         model.Owner.ValueString(),
 		Collation:     model.Collation.ValueStringPointer(),
-		Compatibility: utils2.Ptr(int32(model.Compatibility.ValueInt64())),
+		Compatibility: utils2.Ptr(int32(model.Compatibility.ValueInt64())), //nolint:gosec // TODO
 	}, nil
 }
--- a/stackit/internal/services/sqlserverflexbeta/database/mapper_test.go
+++ b/stackit/internal/services/sqlserverflexbeta/database/mapper_test.go
@ -7,6 +7,7 @@ import (
 	"github.com/hashicorp/terraform-plugin-framework/types"
 	"github.com/stackitcloud/stackit-sdk-go/core/utils"
 	"github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	datasource "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/database/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexbeta/database/resource.go
+++ b/stackit/internal/services/sqlserverflexbeta/database/resource.go
@ -19,6 +19,7 @@ import (
 	utils2 "github.com/stackitcloud/stackit-sdk-go/core/utils"

 	sqlserverflexbeta "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
 	wait "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/wait/sqlserverflexbeta"

@ -177,7 +178,7 @@ func (r *databaseResource) Create(ctx context.Context, req resource.CreateReques
 	}

 	if !data.Compatibility.IsNull() && !data.Compatibility.IsUnknown() {
-		payLoad.Compatibility = utils2.Ptr(int32(data.Compatibility.ValueInt64()))
+		payLoad.Compatibility = utils2.Ptr(int32(data.Compatibility.ValueInt64())) //nolint:gosec // TODO
 	}

 	payLoad.Name = data.Name.ValueString()
--- a/stackit/internal/services/sqlserverflexbeta/flavor/datasource.go
+++ b/stackit/internal/services/sqlserverflexbeta/flavor/datasource.go
@ -17,6 +17,7 @@ import (
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"

 	"github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	sqlserverflexbetaGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/flavor/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexbeta/flavor/functions.go
+++ b/stackit/internal/services/sqlserverflexbeta/flavor/functions.go
@ -50,7 +50,7 @@ func getFlavorsByFilter(
 		}

 		// If the API returns no flavors, we have reached the end of the list.
-		if res.Flavors == nil || len(res.Flavors) == 0 {
+		if len(res.Flavors) == 0 {
 			break
 		}

--- a/stackit/internal/services/sqlserverflexbeta/flavor/functions_test.go
+++ b/stackit/internal/services/sqlserverflexbeta/flavor/functions_test.go
@ -1,6 +1,6 @@
 package sqlserverFlexBetaFlavor

-//import (
+// import (
 //	"context"
 //	"testing"
 //
@ -9,28 +9,28 @@ package sqlserverFlexBetaFlavor
 //	"github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
 //)
 //
-//type mockRequest struct {
+// type mockRequest struct {
 //	executeFunc func() (*v3beta1api.GetFlavorsResponse, error)
 //}
 //
-//func (m *mockRequest) Page(_ int64) v3beta1api.ApiGetFlavorsRequestRequest { return m }
-//func (m *mockRequest) Size(_ int64) v3beta1api.ApiGetFlavorsRequestRequest { return m }
-//func (m *mockRequest) Sort(_ v3beta1api.FlavorSort) v3beta1api.ApiGetFlavorsRequestRequest {
+// func (m *mockRequest) Page(_ int64) v3beta1api.ApiGetFlavorsRequestRequest { return m }
+// func (m *mockRequest) Size(_ int64) v3beta1api.ApiGetFlavorsRequestRequest { return m }
+// func (m *mockRequest) Sort(_ v3beta1api.FlavorSort) v3beta1api.ApiGetFlavorsRequestRequest {
 //	return m
 //}
-//func (m *mockRequest) Execute() (*v3beta1api.GetFlavorsResponse, error) {
+// func (m *mockRequest) Execute() (*v3beta1api.GetFlavorsResponse, error) {
 //	return m.executeFunc()
 //}
 //
-//type mockFlavorsClient struct {
+// type mockFlavorsClient struct {
 //	executeRequest func() v3beta1api.ApiGetFlavorsRequestRequest
 //}
 //
-//func (m *mockFlavorsClient) GetFlavorsRequest(_ context.Context, _, _ string) v3beta1api.ApiGetFlavorsRequestRequest {
+// func (m *mockFlavorsClient) GetFlavorsRequest(_ context.Context, _, _ string) v3beta1api.ApiGetFlavorsRequestRequest {
 //	return m.executeRequest()
 //}
 //
-//var mockResp = func(page int64) (*v3beta1api.GetFlavorsResponse, error) {
+// var mockResp = func(page int64) (*v3beta1api.GetFlavorsResponse, error) {
 //	if page == 1 {
 //		return &v3beta1api.GetFlavorsResponse{
 //			Flavors: &[]v3beta1api.ListFlavors{
@ -52,7 +52,7 @@ package sqlserverFlexBetaFlavor
 //	}, nil
 //}
 //
-//func TestGetFlavorsByFilter(t *testing.T) {
+// func TestGetFlavorsByFilter(t *testing.T) {
 //	tests := []struct {
 //		description string
 //		projectId   string
--- a/stackit/internal/services/sqlserverflexbeta/instance/functions.go
+++ b/stackit/internal/services/sqlserverflexbeta/instance/functions.go
@ -12,6 +12,7 @@ import (
 	"github.com/hashicorp/terraform-plugin-framework/types"

 	"github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	sqlserverflexbetaDataGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/instance/datasources_gen"
 	sqlserverflexbetaResGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/instance/resources_gen"
 )
@ -230,7 +231,7 @@ func toCreatePayload(
 		FlavorId:       model.FlavorId.ValueString(),
 		Name:           model.Name.ValueString(),
 		Network:        networkPayload,
-		RetentionDays:  int32(model.RetentionDays.ValueInt64()),
+		RetentionDays:  int32(model.RetentionDays.ValueInt64()), //nolint:gosec // TODO
 		Storage:        storagePayload,
 		Version:        v3beta1api.InstanceVersion(model.Version.ValueString()),
 	}, nil
@ -249,21 +250,24 @@ func toUpdatePayload(
 	}
 	replVal := v3beta1api.Replicas(uint32(m.Replicas.ValueInt64())) // nolint:gosec // check is performed above

-	var netAcl []string
-	diags := m.Network.Acl.ElementsAs(ctx, &netAcl, false)
+	var netACL []string
+	diags := m.Network.Acl.ElementsAs(ctx, &netACL, false)
 	resp.Diagnostics.Append(diags...)
 	if diags.HasError() {
 		return nil, fmt.Errorf("error converting model network acl value")
 	}
+	if m.RetentionDays.ValueInt64() > math.MaxInt32 {
+		return nil, fmt.Errorf("value is too large for int32")
+	}
 	return &v3beta1api.UpdateInstanceRequestPayload{
 		BackupSchedule: m.BackupSchedule.ValueString(),
 		FlavorId:       m.FlavorId.ValueString(),
 		Name:           m.Name.ValueString(),
 		Network: v3beta1api.UpdateInstanceRequestPayloadNetwork{
-			Acl: netAcl,
+			Acl: netACL,
 		},
 		Replicas:      replVal,
-		RetentionDays: int32(m.RetentionDays.ValueInt64()),
+		RetentionDays: int32(m.RetentionDays.ValueInt64()), //nolint:gosec // checked above
 		Storage:       v3beta1api.StorageUpdate{Size: m.Storage.Size.ValueInt64Pointer()},
 		Version:       v3beta1api.InstanceVersion(m.Version.ValueString()),
 	}, nil
--- a/stackit/internal/services/sqlserverflexbeta/instance/functions_test.go
+++ b/stackit/internal/services/sqlserverflexbeta/instance/functions_test.go
@ -11,6 +11,7 @@ import (
 	"github.com/hashicorp/terraform-plugin-framework/resource"
 	"github.com/hashicorp/terraform-plugin-framework/types"
 	sqlserverflexbetaPkgGen "github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	sqlserverflexbetaRs "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/instance/resources_gen"
 )

@ -98,10 +99,6 @@ func Test_handleEncryption(t *testing.T) {
 				if diff != "" {
 					t.Fatalf("Data does not match: %s", diff)
 				}
-
-				//if !reflect.DeepEqual(got, tt.want) {
-				//	t.Errorf("handleEncryption() = %v, want %v", got, tt.want)
-				//}
 			},
 		)
 	}
--- a/stackit/internal/services/sqlserverflexbeta/sqlserverflex_acc_test.go
+++ b/stackit/internal/services/sqlserverflexbeta/sqlserverflex_acc_test.go
@ -10,6 +10,7 @@ import (

 	"github.com/hashicorp/terraform-plugin-testing/helper/acctest"
 	"github.com/hashicorp/terraform-plugin-testing/helper/resource"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/internal/testutils"
 	sqlserverflexbeta "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/instance"

--- a/stackit/internal/services/sqlserverflexbeta/user/datasource.go
+++ b/stackit/internal/services/sqlserverflexbeta/user/datasource.go
@ -15,6 +15,7 @@ import (
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"

 	"github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	sqlserverflexbetaGen "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/user/datasources_gen"
 )

--- a/stackit/internal/services/sqlserverflexbeta/user/mapper.go
+++ b/stackit/internal/services/sqlserverflexbeta/user/mapper.go
@ -9,6 +9,7 @@ import (
 	"github.com/hashicorp/terraform-plugin-framework/types"

 	"github.com/stackitcloud/stackit-sdk-go/services/sqlserverflex/v3beta1api"
+
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/conversion"
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/core"
 	"tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/utils"
--- a/stackit/internal/services/sqlserverflexbeta/user/mapper_test.go
+++ b/stackit/internal/services/sqlserverflexbeta/user/mapper_test.go
@ -266,14 +266,14 @@ func TestMapFieldsCreate(t *testing.T) {
 		//	testRegion,
 		//	resourceModel{},
 		//	false,
-		//},
+		// },
 		//{
 		//	"no_resource_id",
 		//	&sqlserverflexbeta.CreateUserResponse{},
 		//	testRegion,
 		//	resourceModel{},
 		//	false,
-		//},
+		// },
 	}
 	for _, tt := range tests {
 		t.Run(
--- a/stackit/internal/wait/postgresflexalpha/wait.go
+++ b/stackit/internal/wait/postgresflexalpha/wait.go
@ -199,7 +199,7 @@ func PartialUpdateInstanceWaitHandler(
 			}
 		},
 	)
-	// handler.SetTimeout(45 * time.Minute).SetSleepBeforeWait(30 * time.Second)
+	handler.SetTimeout(45 * time.Minute).SetSleepBeforeWait(30 * time.Second)
 	return handler
 }

@ -207,16 +207,16 @@ func PartialUpdateInstanceWaitHandler(
 func GetUserByIdWaitHandler(
 	ctx context.Context,
 	a APIClientUserInterface,
-	projectId, instanceId, region string,
-	userId int64,
+	projectID, instanceID, region string,
+	userID int64,
 ) *wait.AsyncActionHandler[v3alpha1api.GetUserResponse] {
 	handler := wait.New(
 		func() (waitFinished bool, response *v3alpha1api.GetUserResponse, err error) {
-			if userId > math.MaxInt32 {
+			if userID > math.MaxInt32 {
 				return false, nil, fmt.Errorf("userID too large for int32")
 			}
-			userId32 := int32(userId)
-			s, err := a.GetUserRequest(ctx, projectId, region, instanceId, userId32).Execute()
+			userID32 := int32(userID) //nolint:gosec // checked above
+			s, err := a.GetUserRequest(ctx, projectID, region, instanceID, userID32).Execute()
 			if err != nil {
 				var oapiErr *oapierror.GenericOpenAPIError
 				ok := errors.As(err, &oapiErr)
@ -246,16 +246,16 @@ func GetUserByIdWaitHandler(
 func GetDatabaseByIdWaitHandler(
 	ctx context.Context,
 	a APIClientDatabaseInterface,
-	projectId, instanceId, region string,
-	databaseId int64,
+	projectID, instanceID, region string,
+	databaseID int64,
 ) *wait.AsyncActionHandler[v3alpha1api.GetDatabaseResponse] {
 	handler := wait.New(
 		func() (waitFinished bool, response *v3alpha1api.GetDatabaseResponse, err error) {
-			if databaseId > math.MaxInt32 {
+			if databaseID > math.MaxInt32 {
 				return false, nil, fmt.Errorf("databaseID too large for int32")
 			}
-			dbId32 := int32(databaseId)
-			s, err := a.GetDatabaseRequest(ctx, projectId, region, instanceId, dbId32).Execute()
+			dbId32 := int32(databaseID) //nolint:gosec // is checked above
+			s, err := a.GetDatabaseRequest(ctx, projectID, region, instanceID, dbId32).Execute()
 			if err != nil {
 				var oapiErr *oapierror.GenericOpenAPIError
 				ok := errors.As(err, &oapiErr)
--- a/stackit/internal/wait/sqlserverflexalpha/wait_test.go
+++ b/stackit/internal/wait/sqlserverflexalpha/wait_test.go
@ -13,14 +13,6 @@ import (
 )

 // Used for testing instance operations
-type apiClientInstanceMocked struct {
-	instanceID        string
-	instanceState     string
-	instanceNetwork   v3alpha1api.InstanceNetwork
-	instanceIsDeleted bool
-	instanceGetFails  bool
-}
-
 func TestCreateInstanceWaitHandler(t *testing.T) {
 	instanceID := utils.Ptr("foo")
 	tests := []struct {
--- a/stackit/internal/wait/sqlserverflexbeta/wait_test.go
+++ b/stackit/internal/wait/sqlserverflexbeta/wait_test.go
@ -92,7 +92,6 @@ func TestCreateInstanceWaitHandler(t *testing.T) {
 	for _, tt := range tests {
 		t.Run(
 			tt.desc, func(t *testing.T) {
-
 				listRolesMock := func(_ v3beta1api.ApiListRolesRequestRequest) (*v3beta1api.ListRolesResponse, error) {
 					return &v3beta1api.ListRolesResponse{
 						Roles: []string{},
--- a/stackit/provider.go
+++ b/stackit/provider.go
@ -20,6 +20,7 @@ import (
 	"github.com/hashicorp/terraform-plugin-log/tflog"
 	sdkauth "github.com/stackitcloud/stackit-sdk-go/core/auth"
 	"github.com/stackitcloud/stackit-sdk-go/core/config"
+
 	sqlserverflexalphaDatabase "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/database"
 	sqlserverflexalphaInstance "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/instance"
 	sqlserverflexalphaUser "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/user"
@ -36,7 +37,7 @@ import (

 	sqlserverFlexBetaDatabase "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/database"
 	sqlserverflexBetaInstance "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbeta/instance"
-	//sqlserverFlexBetaUser "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbetaUser/user"
+	// sqlserverFlexBetaUser "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexbetaUser/user"
 )

 // Ensure the implementation satisfies the expected interfaces
@ -531,7 +532,7 @@ func (p *Provider) DataSources(_ context.Context) []func() datasource.DataSource
 		postgresFlexAlphaUser.NewUserDataSource,
 		postgresflexalphaFlavors.NewFlavorsDataSource,

-		//sqlserverFlexAlphaFlavor.NewFlavorDataSource,
+		// sqlserverFlexAlphaFlavor.NewFlavorDataSource,
 		sqlserverflexalphaInstance.NewInstanceDataSource,
 		sqlserverflexalphaUser.NewUserDataSource,
 		sqlserverflexalphaDatabase.NewDatabaseDataSource,
@ -539,7 +540,7 @@ func (p *Provider) DataSources(_ context.Context) []func() datasource.DataSource
 		sqlserverFlexBetaDatabase.NewDatabaseDataSource,
 		sqlserverflexBetaInstance.NewInstanceDataSource,
 		sqlserverflexbetaUser.NewUserDataSource,
-		//sqlserverFlexBetaFlavor.NewFlavorDataSource,
+		// sqlserverFlexBetaFlavor.NewFlavorDataSource,
 	}
 }

--- a/stackit/provider_acc_test.go
+++ b/stackit/provider_acc_test.go
@ -9,7 +9,9 @@ import (
 	"testing"

 	"github.com/google/go-cmp/cmp"
+
 	sqlserverflexalphaDatabase "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/sqlserverflexalpha/database"
+
 	//nolint:staticcheck // used for acceptance testing
 	postgresFlexAlphaFlavor "tf-provider.git.onstackit.cloud/stackit-dev-tools/terraform-provider-stackitprivatepreview/stackit/internal/services/postgresflexalpha/flavor"