From 880ff4bff4c8220655dab6e3500fe308781d52dc Mon Sep 17 00:00:00 2001 From: user Date: Fri, 20 Feb 2026 02:48:36 -0800 Subject: [PATCH 1/3] ci: add Gitea Actions workflow for make check --- .gitea/workflows/check.yml | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 .gitea/workflows/check.yml diff --git a/.gitea/workflows/check.yml b/.gitea/workflows/check.yml new file mode 100644 index 0000000..5cf3beb --- /dev/null +++ b/.gitea/workflows/check.yml @@ -0,0 +1,23 @@ +name: Check + +on: + push: + branches: [main] + pull_request: + branches: [main] + +jobs: + check: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - uses: actions/setup-go@v5 + with: + go-version-file: go.mod + + - name: Install golangci-lint + run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1 + + - name: Run make check + run: make check -- 2.45.2 From 23aabdbcaa4c943e5346e2607aecde3a4ba0f761 Mon Sep 17 00:00:00 2001 From: user Date: Fri, 20 Feb 2026 02:58:41 -0800 Subject: [PATCH 2/3] security: pin CI actions to commit SHAs --- .gitea/workflows/check.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/check.yml b/.gitea/workflows/check.yml index 5cf3beb..acd1c59 100644 --- a/.gitea/workflows/check.yml +++ b/.gitea/workflows/check.yml @@ -10,9 +10,9 @@ jobs: check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - - uses: actions/setup-go@v5 + - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5 with: go-version-file: go.mod -- 2.45.2 From 845642d16a667532161ca8f25e3d101d45fa994f Mon Sep 17 00:00:00 2001 From: clawbot Date: Fri, 20 Feb 2026 03:10:44 -0800 Subject: [PATCH 3/3] security: pin all go install refs to commit SHAs --- .gitea/workflows/check.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/check.yml b/.gitea/workflows/check.yml index acd1c59..8c371d1 100644 --- a/.gitea/workflows/check.yml +++ b/.gitea/workflows/check.yml @@ -17,7 +17,7 @@ jobs: go-version-file: go.mod - name: Install golangci-lint - run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1 + run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee # v2.10.1 - name: Run make check run: make check -- 2.45.2