Replaced convoluted setup (actions/setup-go → install golangci-lint → install goimports → make check) with simple docker build . per repo policy
Updated actions/checkout to v4.2.2 pinned by SHA
Runs on all pushes, not just main/PR branches
Dockerfile:
Pinned golang:1.25-alpine and alpine:3.21 by SHA256 hash (was mutable tags)
Pinned golangci-lint v2.10.1 and goimports v0.42.0 by commit hash (was @latest)
Added binutils-gold for linker compatibility
Dockerfile already runs make check as build step, so docker build . = full CI
Verification
docker build . passes locally (all checks green).
Policy reference
From REPO_POLICIES.md: "Every repo should have a Gitea Actions workflow that runs docker build . on push. Since the Dockerfile already runs make check, a successful build implies all checks pass."
## Changes
**CI workflow** (`.gitea/workflows/check.yml`):
- Replaced convoluted setup (actions/setup-go → install golangci-lint → install goimports → make check) with simple `docker build .` per repo policy
- Updated actions/checkout to v4.2.2 pinned by SHA
- Runs on all pushes, not just main/PR branches
**Dockerfile**:
- Pinned `golang:1.25-alpine` and `alpine:3.21` by SHA256 hash (was mutable tags)
- Pinned golangci-lint v2.10.1 and goimports v0.42.0 by commit hash (was `@latest`)
- Added `binutils-gold` for linker compatibility
- Dockerfile already runs `make check` as build step, so `docker build .` = full CI
## Verification
`docker build .` passes locally (all checks green).
## Policy reference
From REPO_POLICIES.md: "Every repo should have a Gitea Actions workflow that runs `docker build .` on push. Since the Dockerfile already runs `make check`, a successful build implies all checks pass."
- Replace convoluted CI workflow (setup-go, install golangci-lint, install
goimports, make check) with simple 'docker build .' per repo policy
- Pin Docker base images by SHA256 hash instead of mutable tags
- Pin golangci-lint and goimports by commit hash instead of @latest
- Add binutils-gold for linker compatibility on alpine
- Run on all pushes, not just main/PR branches
sneak
merged commit 02ca796085 into main2026-02-28 13:04:31 +01:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Changes
CI workflow (
.gitea/workflows/check.yml):docker build .per repo policyDockerfile:
golang:1.25-alpineandalpine:3.21by SHA256 hash (was mutable tags)@latest)binutils-goldfor linker compatibilitymake checkas build step, sodocker build .= full CIVerification
docker build .passes locally (all checks green).Policy reference
From REPO_POLICIES.md: "Every repo should have a Gitea Actions workflow that runs
docker build .on push. Since the Dockerfile already runsmake check, a successful build implies all checks pass."