Skip to content

ci: add checks, signed releases and Renovate - #2

Merged
jabbrwcky merged 3 commits into
mainfrom
ci/setup
Nov 6, 2026
Merged

jabbrwcky merged 3 commits into
mainfrom
ci/setup

Conversation

@jabbrwcky

Copy link
Copy Markdown
Owner

Adds CI and release publishing.

  • ci.yml (PRs + main): go vet, go test -race with a 75% coverage gate (currently 86%), gosec, govulncheck
  • release.yml (v* tags): gh-extension-precompile with build attestations, plus cosign keyless *.sigstore.json bundles per asset
  • renovate.json: Go modules, action digests, and the go run gosec version
  • Actions pinned to commit SHAs of latest releases
  • Tests for run, pick, fzf, subFormat (stub HTTP transport, fake gh/fzf scripts); newClient/stdout made swappable for that
  • README: release verification

Renovate needs the Renovate GitHub app installed on the repo.

- ci: vet, race tests with 75% coverage gate, gosec, govulncheck
- release: pin actions, cosign keyless signatures for assets
- tests: cover run/pick/fzf via stub API transport and fake gh/fzf
@jabbrwcky
jabbrwcky merged commit 7cfe5ec into main Nov 6, 2026
7 checks passed
@jabbrwcky
jabbrwcky deleted the ci/setup branch November 6, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant