Skip to content

Improve GitHub workflows - #146

Merged
henrymcconville merged 4 commits into
masterfrom
chore/improve-workflows
Nov 1, 2026
Merged

henrymcconville merged 4 commits into
masterfrom
chore/improve-workflows

Conversation

@henrymcconville

@henrymcconville henrymcconville commented Nov 1, 2026 •

Copy link
Copy Markdown
Collaborator
  • Test workflow:
    • Run on pushes to master as well as pull requests
    • Restrict the token to read-only and cancel superseded PR runs
    • Run tests with the race detector and replace go get with go mod download
    • Add a lint job with a go mod tidy check and golangci-lint
    • Add an image job that builds the Docker image and scans it with Trivy, failing on fixable high and critical vulnerabilities
  • Container Scan workflow:
    • Pin the Trivy action to a commit SHA
  • Also add Dependabot config for GitHub Actions and Go modules.
  • Fix issues raised by linting step

henrymcconville and others added 4 commits November 1, 2026 17:33
Test workflow:
- Run on pushes to master as well as pull requests
- Restrict the token to read-only and cancel superseded PR runs
- Run tests with the race detector and replace go get with go mod download
- Add a lint job with a go mod tidy check and golangci-lint
- Add an image job that builds the Docker image and scans it with Trivy,
  failing on fixable high and critical vulnerabilities

Container Scan workflow:
- Pin the Trivy action to a commit SHA
- Re-enable the workflow on each scheduled run, so the schedule isn't
  disabled after 60 days without repository activity

Also add Dependabot config for GitHub Actions and Go modules.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@henrymcconville
henrymcconville merged commit bc46641 into master Nov 1, 2026
3 checks passed
@henrymcconville
henrymcconville deleted the chore/improve-workflows branch November 1, 2026 17:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant