docs(skill): capture the batched fix-pass execution in the code-revie… #311
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| test: | |
| name: lint & test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.25" | |
| cache: true | |
| - name: gofmt | |
| run: | | |
| out=$(gofmt -l .) | |
| if [ -n "$out" ]; then | |
| echo "gofmt diff in:" | |
| echo "$out" | |
| exit 1 | |
| fi | |
| - name: go vet | |
| run: go vet ./... | |
| - name: golangci-lint | |
| uses: golangci/golangci-lint-action@v9 | |
| with: | |
| version: v2.12 | |
| - name: go test | |
| run: go test ./... | |
| - name: go test -race | |
| run: go test -race ./... | |
| - name: build | |
| run: go build ./cmd/kasapi-cli | |
| docs-sync: | |
| name: docs sync | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.25" | |
| cache: true | |
| # Regenerate docs/cli/ from the live command tree and fail if the | |
| # checked-in copy drifted from what `make docs` produces. Ensures | |
| # any flag, subcommand, or short/long-description change comes | |
| # paired with a docs/cli/ refresh. | |
| - name: regenerate docs/cli/ | |
| run: make docs | |
| - name: verify docs/cli/ is up to date | |
| run: | | |
| if ! git diff --exit-code -- docs/cli; then | |
| echo | |
| echo "docs/cli/ is out of date — run 'make docs' locally and commit the result." | |
| exit 1 | |
| fi | |
| goreleaser-check: | |
| name: goreleaser config check | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v7 | |
| - uses: goreleaser/goreleaser-action@v7 | |
| with: | |
| distribution: goreleaser | |
| version: "~> v2" | |
| args: check | |
| govulncheck: | |
| name: govulncheck | |
| runs-on: ubuntu-latest | |
| steps: | |
| # persist-credentials: false avoids an extraheader / | |
| # duplicate-Authorization conflict when golang/govulncheck-action@v1 | |
| # runs its own internal checkout against actions/checkout@v7 — the | |
| # action has not been updated for v6's credential persistence. | |
| - uses: actions/checkout@v7 | |
| with: | |
| persist-credentials: false | |
| - uses: actions/setup-go@v6 | |
| with: | |
| go-version: "1.25" | |
| cache: true | |
| # Official Go vulnerability scanner. Reads go.mod plus the call | |
| # graph and only reports CVEs on reachable code paths, so the | |
| # signal-to-noise ratio is much higher than a flat `go list -m` | |
| # advisory check. Fails the job on any reachable advisory. | |
| - uses: golang/govulncheck-action@v1 | |
| with: | |
| go-version-input: "1.25" | |
| check-latest: true |