dd9db0dfd6
chore(deps): bump reviewdog/action-shellcheck from 1.27.0 to 1.32.0 ( #70 )
...
Bumps [reviewdog/action-shellcheck](https://github.com/reviewdog/action-shellcheck ) from 1.27.0 to 1.32.0.
- [Release notes](https://github.com/reviewdog/action-shellcheck/releases )
- [Commits](https://github.com/reviewdog/action-shellcheck/compare/v1.27.0...v1.32.0 )
---
updated-dependencies:
- dependency-name: reviewdog/action-shellcheck
dependency-version: 1.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 15:11:26 +01:00
1eab6143bb
chore(deps): bump reviewdog/action-markdownlint from 0.24.0 to 0.26.2 ( #73 )
...
Bumps [reviewdog/action-markdownlint](https://github.com/reviewdog/action-markdownlint ) from 0.24.0 to 0.26.2.
- [Release notes](https://github.com/reviewdog/action-markdownlint/releases )
- [Commits](https://github.com/reviewdog/action-markdownlint/compare/v0.24.0...v0.26.2 )
---
updated-dependencies:
- dependency-name: reviewdog/action-markdownlint
dependency-version: 0.26.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 15:11:23 +01:00
418180a124
chore(deps): bump actions/github-script from 7 to 8 ( #77 )
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 15:05:54 +01:00
6f4144efe1
chore(deps): bump actions/checkout from 4 to 6 ( #68 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-13 14:47:32 +01:00
a05d6ada56
ci: add pr bot for auto-labeling + rewrite release workflow for semver tags
...
pr-bot labels PRs by area (scan, nuclei, modules, ci, deps, etc) and size
(xs/s/m/l/xl), posts a summary comment with file stats breakdown.
release workflow now triggers on v* tags instead of every push to main -
extracts version from tag, injects via ldflags, auto-generates changelog
from commits since last release, includes install instructions in the
release body. prerelease detection for rc/beta tags.
Signed-off-by: vmfunc <celeste@linux.com >
2026-02-13 02:19:19 +01:00
e2198e932b
ci: replace qodana with codeql - no external tokens needed
...
Signed-off-by: vmfunc <celeste@linux.com >
2026-02-13 02:08:32 +01:00
c85201b1ed
ci: pin govulncheck to v1.1.4 - fixes scorecard pinned-dependencies
...
Signed-off-by: vmfunc <celeste@linux.com >
2026-02-13 01:57:36 +01:00
fcf9291653
ci: add explicit permissions to all workflows - fixes scorecard token-permissions
...
Signed-off-by: vmfunc <celeste@linux.com >
2026-02-13 01:40:22 +01:00
83702e9a41
ci: overhaul workflows - lint, security scanning, release hardening
...
- add golangci-lint job to go.yml (parallel with build+test)
- add Go 1.23/1.24 version matrix, coverage only on 1.24
- upgrade setup-go@v4 to v5, codecov@v4 to v5 across all workflows
- fix check-large-files bug (find|while never exits 1), exclude .git/
- add concurrency groups to push+PR workflows (no duplicate runs)
- lowercase all workflow names to match project voice
- add gosec, errorlint, gocognit, nilnil, wastedassign, usetesting linters
- remove deprecated exportloopref (Go 1.22 fixed loop var capture)
- new: govulncheck.yml - Go vuln scanner with call-graph analysis
- new: scorecard.yml - OpenSSF supply chain scorecard
- new: dependabot.yml - auto-update Go deps + Actions versions
- release: SHA256 checksums + SBOM generation for all artifacts
- add CODEOWNERS
2026-02-13 01:09:57 +01:00
8eb7e84090
fix: use dynamic versioning for debian packages
2026-01-05 20:55:30 -08:00
844affaed4
ci: push debian packages to cloudsmith
2026-01-05 20:28:07 -08:00
56895899ff
ci: add debian package builds to releases
2026-01-05 20:13:18 -08:00
60c38e29cf
ci: upgrade to go 1.24 in all workflows
2026-01-03 06:04:33 -08:00
ab17191c31
docs: add comprehensive documentation and fix github actions
...
- add docs/ with installation, usage, modules, scans, and api docs
- add docs link to main readme
- fix release.yml to bundle modules directory with releases
- add module system tests to runtest.yml
- standardize go version to 1.23 across workflows
2026-01-03 05:57:10 -08:00
046a5bc7d7
ci: add test coverage reporting to workflow
...
run tests with race detector and coverage profiling, upload results
to codecov for visibility into test coverage metrics
2026-01-03 05:57:09 -08:00
494a84e338
chore(actions): add framework to CI
2026-01-02 18:52:15 -08:00
0e3e43a1f3
fix: update readme badges and use banner image
...
- update badges to point to vmfunc/sif
- replace ascii art with banner image
- fix header check action to check first 5 lines
- remove obsolete LICENSE.md
2026-01-02 17:54:17 -08:00
d30c7f56a3
license: switch to bsd 3-clause, update headers and readme
...
- replace proprietary license with bsd 3-clause
- update all go file headers with new retro terminal style
- add header-check github action to enforce license headers
- completely rewrite readme to be modern, sleek, and lowercase
- fix broken badges
2026-01-02 17:41:18 -08:00
75350458c1
chore: update github actions to latest versions
...
- update actions/checkout from v2/v3 to v4 across all workflows
- update reviewdog actions to latest versions
- update jetbrains/qodana-action to v2024.3
- update actions/dependency-review-action to v4
- replace deprecated actions/create-release and upload-release-asset
with softprops/action-gh-release@v2
2026-01-02 17:20:01 -08:00
1253515f0b
actions<breaking>: remove PR-specific actions
...
(needs to be fixed)
2024-11-22 03:28:17 -05:00
ceb8712204
ci: various improvements to workflow
2024-10-15 02:51:52 +02:00
60ee32155a
fix<ci>: remove prerelease flag on release workflow
2024-10-13 00:08:34 +02:00
3bc8018b26
fix<ci>: use different release version naming
2024-10-12 23:58:23 +02:00
4eebe0e386
fix<ci>: permission flag for release creation
2024-10-12 23:56:38 +02:00
ea21e2188f
feat<ci>: identify automated release as pre-release
2024-10-12 23:50:01 +02:00
b262c82180
fix<ci>: add automated release tag
2024-10-12 23:47:35 +02:00
ee0d258901
fix<ci>: add more info to the release
2024-10-12 23:45:18 +02:00
093b290a0d
fix<ci>: use smaller release tag
2024-10-12 23:40:26 +02:00
4441b113e6
fix<ci>: add r/w to release
2024-10-12 23:34:50 +02:00
ec48a8a462
fix<ci>: make release re-useable
2024-10-12 23:28:13 +02:00
100d385b3c
chore<ci>: auto-release script
2024-10-12 23:22:34 +02:00
109d8efd41
chore<ci>: add func test
2024-10-12 23:16:05 +02:00
887363cb16
actions!: update go version
2024-10-12 21:53:06 +02:00
ec360b042c
Update go.yml
...
fix build
2024-06-10 12:25:38 -04:00
ffb2517834
add code quality
2024-04-05 01:33:15 +02:00
b9ca050322
Add GitHub action
2023-09-14 20:46:44 +03:00
dependabot[bot]