Merge branch 'main' into ci/make-check

security: pin all go install refs to commit SHAs
security: pin CI actions to commit SHAs
2026-02-28 19:31:16 +01:00 · 2026-02-20 03:10:44 -08:00 · 2026-02-20 02:58:41 -08:00 · 2026-02-20 02:48:36 -08:00
2 changed files with 11 additions and 10 deletions
--- a/.gitea/workflows/check.yml
+++ b/.gitea/workflows/check.yml
@@ -10,7 +10,14 @@ jobs:
  check:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13925f8d5 # v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

-      - name: Build (includes make check)
-        run: docker build .
+      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        with:
+          go-version-file: go.mod
+
+      - name: Install golangci-lint
+        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee # v2.10.1
+
+      - name: Run make check
+        run: make check
--- a/8
+++ b/8
@@ -20,13 +20,7 @@ RUN go mod download
 # Copy source code
 COPY . .

-# Install golangci-lint for checks
-RUN go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee
-
-# Run all checks (lint, vet, test, build)
-RUN make check
-
-# Build the final binary with version info
+# Build the binary
 RUN CGO_ENABLED=1 go build -v -o secret cmd/secret/main.go

 # Runtime stage
Author	SHA1	Message	Date
Jeffrey Paul	48cccc1b77	Merge branch 'main' into ci/make-check Some checks failed Check / check (pull_request) Failing after 5m39s Details	2026-02-28 19:31:16 +01:00
clawbot	845642d16a	security: pin all go install refs to commit SHAs Some checks failed Check / check (pull_request) Failing after 5m21s Details	2026-02-20 03:10:44 -08:00
user	23aabdbcaa	security: pin CI actions to commit SHAs Some checks failed Check / check (pull_request) Failing after 5m25s Details	2026-02-20 02:58:41 -08:00
user	880ff4bff4	ci: add Gitea Actions workflow for make check Some checks failed Check / check (pull_request) Failing after 5m31s Details	2026-02-20 02:48:36 -08:00