Micheal Wilkinson
dd1d802605
ci: replace gosec action with direct invocation, pin govulncheck to v1.0.4
...
Per security scanning requirements in project instructions:
- Replace securego/gosec@v2.22 .3 action with go install + gosec run step
in both push-validation and pr-validation to avoid compatibility issues
with Go 1.26.1
- Pin golang/govulncheck-action from @v1 to @v1.0.4 in both workflows;
major-version tags do not resolve reliably in Gitea API
- Move GOTOOLCHAIN=auto from per-step env to job-level env in both workflows
- Bump coverage-badge in push-validation from v1.0.1 to v1.1.0
2026-03-21 20:15:08 +00:00
Micheal Wilkinson
014b330931
ci(pr-validation): replace manual badge/gate logic with vociferate actions
...
- Remove manual changelog validation shell script
- Remove AWS CLI install and jq tooling steps
- Remove hand-rolled SVG badge generation, S3 upload, and PR comment steps
- Replace with coverage-badge@v1.1.0 for coverage artefact upload
- Replace with decorate-pr@v1.1.0 for PR comment and changelog gate
(enable-changelog-gate: true, changelog-gate-mode: strict)
- Retain per-package coverage gate awk logic (Aether threshold enforcement)
2026-03-21 20:13:40 +00:00
Micheal Wilkinson
eb63da9354
chore(ci): allow scanner actions to auto-select Go toolchain
2026-03-21 13:54:11 +00:00
Micheal Wilkinson
ecda12fc49
chore(ci): fix gosec action source for gitea runners
2026-03-21 13:34:37 +00:00
Micheal Wilkinson
be14cfdc29
chore(ci): include go bin directory in cache for cli tools
Push Validation / validate (push) Failing after 10s
2026-03-21 13:23:16 +00:00
Micheal Wilkinson
3cc90ff54e
chore(ci): replace manual security tools with marketplace actions and add go fmt check
...
- Replace `go install` of gosec/govulncheck with secureCodeBox/gosec-action and golang/govulncheck-action
- Actions handle their own caching; remove explicit security tools cache step
- Add code formatting check using `go fmt ./...` to reject pushes/PRs with incorrect formatting
- Formatting check runs before security scanning for faster feedback
2026-03-21 13:22:25 +00:00
Micheal Wilkinson
fb4b3f7ed1
chore(ci): add explicit go modules cache to validation workflows
2026-03-21 13:12:42 +00:00
Micheal Wilkinson
106e45d16b
chore(ci): cache security tool binaries in validation workflows
2026-03-21 12:52:34 +00:00
Micheal Wilkinson
332de3a3f6
chore(go): prepare ci runtime for rc and commit tests
Push Validation / validate (push) Failing after 3m6s
2026-03-21 12:18:35 +00:00
Micheal Wilkinson
fc9a30fed1
chore(go): use explicit self-hosted action urls
Push Validation / validate (push) Failing after 43s
2026-03-21 11:52:50 +00:00
Micheal Wilkinson
b235c6ca45
chore(go): wire coverage-badge action inputs
Push Validation / validate (push) Failing after 10s
2026-03-21 11:31:52 +00:00
Micheal Wilkinson
5ecbad8f27
chore(go): keep changelog filename compatibility
2026-03-21 11:24:24 +00:00
Micheal Wilkinson
cd92a961bd
chore(go): harden ci process workflows
2026-03-21 11:20:09 +00:00
Micheal Wilkinson
ad5196420e
chore(go): enforce package coverage gates
2026-03-21 11:14:40 +00:00
Micheal Wilkinson
692e205a63
update vociferate version
2026-03-21 11:11:32 +00:00
Micheal Wilkinson
0112d9a0a6
chore(go): replace releaseprep with vociferate flows
2026-03-21 11:09:36 +00:00
Micheal Wilkinson
28ba4aab70
ci(release): use vociferate releaseprep in gosick
2026-03-20 18:46:55 +00:00
Micheal Wilkinson
93918f3a39
feat(release): guard empty notes and recommend next tag
2026-03-20 14:59:46 +00:00
Micheal Wilkinson
799c8d167d
feat(release): automate release preparation
2026-03-20 14:54:57 +00:00
Micheal Wilkinson
c3f809a586
chore(release): add UPX compression for linux artifacts
2026-03-20 14:46:54 +00:00
Micheal Wilkinson
8fc831dfdf
chore(ci): re-enable Go module caching and add coverage badge to README
Push Validation / validate (push) Successful in 1m52s
2026-03-20 13:55:09 +00:00
Micheal Wilkinson
7e32cd83c5
chore(ci): install aws cli via setup action
Push Validation / validate (push) Successful in 1m46s
2026-03-20 13:42:23 +00:00
Micheal Wilkinson
3d71433630
chore(ci): pin Go toolchain to 1.26.1 in workflows
Push Validation / validate (push) Failing after 1m30s
2026-03-20 13:30:19 +00:00
Micheal Wilkinson
c6c382afce
chore(ci): add bash as default shell for workflows
Push Validation / validate (push) Failing after 1m17s
2026-03-20 13:20:24 +00:00
Micheal Wilkinson
665401f2bd
chore(ci): use catthehacker/ubuntu container for better tool availability
Push Validation / validate (push) Failing after 1m38s
2026-03-20 13:16:11 +00:00
Micheal Wilkinson
d084abd636
chore(ci): remove Go module caching to eliminate artifact cache timeouts
2026-03-20 13:13:53 +00:00
Micheal Wilkinson
484db0781b
ci(gitea): use pipx for awscli installation
Push Validation / validate (push) Failing after 6m34s
2026-03-20 13:04:30 +00:00
Micheal Wilkinson
4a8ef7e1f6
ci(gitea): use pip for awscli installation
Push Validation / validate (push) Failing after 5m59s
2026-03-20 12:53:09 +00:00
Micheal Wilkinson
9d6dacb0f8
ci: cache go modules and build outputs in workflows
2026-03-20 12:07:10 +00:00
Micheal Wilkinson
f6b5186f31
ci(gitea): publish coverage reports to artefact storage
2026-03-20 11:46:05 +00:00
Micheal Wilkinson
0034a6f4e2
ci(gitea): unify push and merged-pr validation
2026-03-20 09:50:00 +00:00
Micheal Wilkinson
a7e4c501e4
ci(gitea): add validation and release workflows
2026-03-20 09:37:09 +00:00
