ci: pin golangci-lint go install to commit hash

Pin golangci-lint to commit 5d1e709b7be35cb2025444e19de266b056b7b7ee (v2.10.1) instead of version tag, matching the hash-pinning policy for all external references.
security: pin CI actions to commit SHAs
2026-02-20 03:08:39 -08:00 · 2026-02-20 03:07:18 -08:00 · 2026-02-20 03:07:18 -08:00 · 2026-02-20 12:05:28 +01:00 · 2026-02-20 02:59:30 -08:00
4 changed files with 5 additions and 22 deletions
--- a/.gitea/workflows/check.yml
+++ b/.gitea/workflows/check.yml
@@ -17,7 +17,7 @@ jobs:
          go-version-file: go.mod

      - name: Install golangci-lint
-        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1
+        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee # v2.10.1

      - name: Run make check
        run: make check
--- a/.gitignore
+++ b/.gitignore
@@ -18,3 +18,7 @@ vendor/
 # Data
 /data/
 *.sqlite3
+
+# Local dev configs
+config.yaml
+config.dev.yml
--- a/config.dev.yml
+++ b/config.dev.yml
@@ -1,11 +0,0 @@
-# Development config for local Docker testing
-signing_key: "dev-signing-key-minimum-32-chars!"
-debug: true
-allow_http: true
-whitelist_hosts:
-  - localhost
-  - s3.sneak.cloud
-  - static.sneak.cloud
-  - sneak.berlin
-  - github.com
-  - user-images.githubusercontent.com
--- a/config.yaml
+++ b/config.yaml
@@ -1,10 +0,0 @@
-debug: true
-port: 8080
-state_dir: ./data
-signing_key: "test-signing-key-for-development-only"
-whitelist_hosts:
-  - "*.example.com"
-  - "images.unsplash.com"
-  - "picsum.photos"
-  - "s3.sneak.cloud"
-allow_http: false
Author	SHA1	Message	Date
user	9e2e3fe9e9	ci: pin golangci-lint go install to commit hash Some checks failed Check / check (pull_request) Failing after 5m31s Details Pin golangci-lint to commit 5d1e709b7be35cb2025444e19de266b056b7b7ee (v2.10.1) instead of version tag, matching the hash-pinning policy for all external references.	2026-02-20 03:08:39 -08:00
user	a94795fac6	security: pin CI actions to commit SHAs	2026-02-20 03:07:18 -08:00
user	8866ec8fd9	ci: add Gitea Actions workflow for make check	2026-02-20 03:07:18 -08:00
Jeffrey Paul	f702e64139	Merge pull request 'chore: remove local dev config files' (#12 ) from chore/remove-stale-files into main Reviewed-on: #12	2026-02-20 12:05:28 +01:00
user	c4368b1541	chore: remove local dev config files Remove config.yaml and config.dev.yml (local development configs with hardcoded keys that shouldn't be committed). config.example.yml remains as the canonical example config. Added removed files to .gitignore.	2026-02-20 02:59:30 -08:00