From ae936b3365e11dd8fbb5418207545fab43c2552d Mon Sep 17 00:00:00 2001 From: user Date: Fri, 20 Feb 2026 02:48:13 -0800 Subject: [PATCH 1/3] ci: add Gitea Actions workflow for make check --- .gitea/workflows/check.yml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .gitea/workflows/check.yml diff --git a/.gitea/workflows/check.yml b/.gitea/workflows/check.yml new file mode 100644 index 0000000..041544a --- /dev/null +++ b/.gitea/workflows/check.yml @@ -0,0 +1,26 @@ +name: Check + +on: + push: + branches: [main] + pull_request: + branches: [main] + +jobs: + check: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - uses: actions/setup-go@v5 + with: + go-version-file: go.mod + + - name: Install golangci-lint + run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1 + + - name: Install goimports + run: go install golang.org/x/tools/cmd/goimports@latest + + - name: Run make check + run: make check From b2e8ffe5e9dc35154f366cfc0f5c341140ed71ef Mon Sep 17 00:00:00 2001 From: user Date: Fri, 20 Feb 2026 02:58:07 -0800 Subject: [PATCH 2/3] security: pin CI actions to commit SHAs --- .gitea/workflows/check.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/check.yml b/.gitea/workflows/check.yml index 041544a..4a6ed2d 100644 --- a/.gitea/workflows/check.yml +++ b/.gitea/workflows/check.yml @@ -10,9 +10,9 @@ jobs: check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - - uses: actions/setup-go@v5 + - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5 with: go-version-file: go.mod From c9c5530f609c36725438cae2c2581d21e6c325fc Mon Sep 17 00:00:00 2001 From: clawbot Date: Fri, 20 Feb 2026 03:10:39 -0800 Subject: [PATCH 3/3] security: pin all go install refs to commit SHAs --- .gitea/workflows/check.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/check.yml b/.gitea/workflows/check.yml index 4a6ed2d..5e9dd05 100644 --- a/.gitea/workflows/check.yml +++ b/.gitea/workflows/check.yml @@ -17,10 +17,10 @@ jobs: go-version-file: go.mod - name: Install golangci-lint - run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1 + run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee # v2.10.1 - name: Install goimports - run: go install golang.org/x/tools/cmd/goimports@latest + run: go install golang.org/x/tools/cmd/goimports@009367f5c17a8d4c45a961a3a509277190a9a6f0 # v0.42.0 - name: Run make check run: make check