Micheal Wilkinson
d63a8bb615
ci: remove fragile external badge actions
2026-03-21 23:15:32 +00:00
Micheal Wilkinson
2294bb940b
ci(pr-validation): harden decoration and summary fallback
2026-03-21 23:02:46 +00:00
Micheal Wilkinson
28820748f7
ci: harden workflow dedup and badge gating
2026-03-21 22:54:07 +00:00
Micheal Wilkinson
411c99532d
ci: deduplicate runs via shared branch-name concurrency group
2026-03-21 21:21:33 +00:00
Micheal Wilkinson
9c7f6fbdf4
ci(pr-validation): fallback changelog gate and fix badge condition
2026-03-21 21:12:09 +00:00
Micheal Wilkinson
65d0a95968
ci(pr-validation): guard badge upload on coverage file
2026-03-21 21:07:43 +00:00
Micheal Wilkinson
7fbbb442a0
ci(pr-validation): always run badge upload and PR decoration
Push Validation / validate (push) Successful in 4m41s
Pull Request Validation / validate (pull_request) Failing after 3m30s
2026-03-21 20:59:39 +00:00
Micheal Wilkinson
038b109e7b
ci: align govulncheck action inputs with workflow standard
2026-03-21 20:45:05 +00:00
Micheal Wilkinson
dd1d802605
ci: replace gosec action with direct invocation, pin govulncheck to v1.0.4
...
Per security scanning requirements in project instructions:
- Replace securego/gosec@v2.22 .3 action with go install + gosec run step
in both push-validation and pr-validation to avoid compatibility issues
with Go 1.26.1
- Pin golang/govulncheck-action from @v1 to @v1.0.4 in both workflows;
major-version tags do not resolve reliably in Gitea API
- Move GOTOOLCHAIN=auto from per-step env to job-level env in both workflows
- Bump coverage-badge in push-validation from v1.0.1 to v1.1.0
2026-03-21 20:15:08 +00:00
Micheal Wilkinson
014b330931
ci(pr-validation): replace manual badge/gate logic with vociferate actions
...
- Remove manual changelog validation shell script
- Remove AWS CLI install and jq tooling steps
- Remove hand-rolled SVG badge generation, S3 upload, and PR comment steps
- Replace with coverage-badge@v1.1.0 for coverage artefact upload
- Replace with decorate-pr@v1.1.0 for PR comment and changelog gate
(enable-changelog-gate: true, changelog-gate-mode: strict)
- Retain per-package coverage gate awk logic (Aether threshold enforcement)
2026-03-21 20:13:40 +00:00
Micheal Wilkinson
eb63da9354
chore(ci): allow scanner actions to auto-select Go toolchain
2026-03-21 13:54:11 +00:00
Micheal Wilkinson
ecda12fc49
chore(ci): fix gosec action source for gitea runners
2026-03-21 13:34:37 +00:00
Micheal Wilkinson
be14cfdc29
chore(ci): include go bin directory in cache for cli tools
Push Validation / validate (push) Failing after 10s
2026-03-21 13:23:16 +00:00
Micheal Wilkinson
3cc90ff54e
chore(ci): replace manual security tools with marketplace actions and add go fmt check
...
- Replace `go install` of gosec/govulncheck with secureCodeBox/gosec-action and golang/govulncheck-action
- Actions handle their own caching; remove explicit security tools cache step
- Add code formatting check using `go fmt ./...` to reject pushes/PRs with incorrect formatting
- Formatting check runs before security scanning for faster feedback
2026-03-21 13:22:25 +00:00
Micheal Wilkinson
fb4b3f7ed1
chore(ci): add explicit go modules cache to validation workflows
2026-03-21 13:12:42 +00:00
Micheal Wilkinson
106e45d16b
chore(ci): cache security tool binaries in validation workflows
2026-03-21 12:52:34 +00:00
Micheal Wilkinson
332de3a3f6
chore(go): prepare ci runtime for rc and commit tests
Push Validation / validate (push) Failing after 3m6s
2026-03-21 12:18:35 +00:00
Micheal Wilkinson
cd92a961bd
chore(go): harden ci process workflows
2026-03-21 11:20:09 +00:00
Micheal Wilkinson
ad5196420e
chore(go): enforce package coverage gates
2026-03-21 11:14:40 +00:00
Micheal Wilkinson
0112d9a0a6
chore(go): replace releaseprep with vociferate flows
2026-03-21 11:09:36 +00:00
Micheal Wilkinson
8fc831dfdf
chore(ci): re-enable Go module caching and add coverage badge to README
Push Validation / validate (push) Successful in 1m52s
2026-03-20 13:55:09 +00:00
Micheal Wilkinson
7e32cd83c5
chore(ci): install aws cli via setup action
Push Validation / validate (push) Successful in 1m46s
2026-03-20 13:42:23 +00:00
Micheal Wilkinson
3d71433630
chore(ci): pin Go toolchain to 1.26.1 in workflows
Push Validation / validate (push) Failing after 1m30s
2026-03-20 13:30:19 +00:00
Micheal Wilkinson
c6c382afce
chore(ci): add bash as default shell for workflows
Push Validation / validate (push) Failing after 1m17s
2026-03-20 13:20:24 +00:00
Micheal Wilkinson
665401f2bd
chore(ci): use catthehacker/ubuntu container for better tool availability
Push Validation / validate (push) Failing after 1m38s
2026-03-20 13:16:11 +00:00
Micheal Wilkinson
d084abd636
chore(ci): remove Go module caching to eliminate artifact cache timeouts
2026-03-20 13:13:53 +00:00
Micheal Wilkinson
484db0781b
ci(gitea): use pipx for awscli installation
Push Validation / validate (push) Failing after 6m34s
2026-03-20 13:04:30 +00:00
Micheal Wilkinson
4a8ef7e1f6
ci(gitea): use pip for awscli installation
Push Validation / validate (push) Failing after 5m59s
2026-03-20 12:53:09 +00:00
Micheal Wilkinson
9d6dacb0f8
ci: cache go modules and build outputs in workflows
2026-03-20 12:07:10 +00:00
Micheal Wilkinson
f6b5186f31
ci(gitea): publish coverage reports to artefact storage
2026-03-20 11:46:05 +00:00
Micheal Wilkinson
a7e4c501e4
ci(gitea): add validation and release workflows
2026-03-20 09:37:09 +00:00
