security: pin all go install refs to commit SHAs

security: pin CI actions to commit SHAs
add CI workflow for make check
2026-02-20 03:10:52 -08:00 · 2026-02-20 02:58:35 -08:00 · 2026-02-20 02:53:14 -08:00 · 2026-02-20 02:53:14 -08:00
2 changed files with 27 additions and 0 deletions
--- a/.gitea/workflows/check.yml
+++ b/.gitea/workflows/check.yml
@ -0,0 +1,18 @@
+name: check
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5
+        with:
+          go-version-file: go.mod
+      - name: Install golangci-lint
+        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee # v2.10.1
+      - name: Run checks
+        run: make check
--- a/9
+++ b/9
@ -67,3 +67,12 @@ local:

 install: vaultik
 	cp ./vaultik $(HOME)/bin/
+
+# Run all checks (formatting, linting, tests) without modifying files
+check:
+	@echo "==> Checking formatting..."
+	@test -z "$$(gofmt -l .)" || (echo "Files not formatted:" && gofmt -l . && exit 1)
+	@echo "==> Running linter..."
+	golangci-lint run ./...
+	@echo "==> Running tests..."
+	go test -race -timeout 30s ./...
Author	SHA1	Message	Date
clawbot	4a7efbae46	security: pin all go install refs to commit SHAs Some checks failed check / check (pull_request) Failing after 7m24s Details	2026-02-20 03:10:52 -08:00
user	28371476bc	security: pin CI actions to commit SHAs Some checks failed check / check (pull_request) Failing after 6m6s Details	2026-02-20 02:58:35 -08:00
user	c65170b8df	add CI workflow for make check Some checks failed check / check (pull_request) Failing after 6m24s Details	2026-02-20 02:53:14 -08:00
user	d4b9d37ece	add make check target	2026-02-20 02:53:14 -08:00