Skip to content

ci: harden workflows, upgrade actions, fix caching#1

Merged
umputun merged 1 commit intomasterfrom
ci/workflow-hardening
Mar 16, 2026
Merged

ci: harden workflows, upgrade actions, fix caching#1
umputun merged 1 commit intomasterfrom
ci/workflow-hardening

Conversation

@paskal
Copy link
Copy Markdown
Contributor

@paskal paskal commented Mar 7, 2026

Summary

  • add explicit permissions (contents: read) for least-privilege
  • upgrade actions to latest major versions (checkout@v6, setup-go@v6, golangci-lint-action@v9)
  • reorder steps: checkout before setup-go for proper caching
  • add persist-credentials: false to checkout
  • add .golangci.yml v2 config with staticcheck QF exclusion
  • combine goveralls install and coverage submission into single step

@paskal paskal requested a review from umputun as a code owner March 7, 2026 19:27
@paskal paskal force-pushed the ci/workflow-hardening branch from a96f2b8 to 8f55b48 Compare March 14, 2026 07:53
@umputun umputun merged commit cd8d1f0 into master Mar 16, 2026
4 checks passed
@paskal paskal deleted the ci/workflow-hardening branch March 16, 2026 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants