jandelgado / golang-ci-template-github-actions / 32466339235
50%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 1
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 50.0%. Remained the same
32466339235

push

github

web-flow 
Pin all actions and tool versions (#96)

* ci: pin action versions, add explicit permissions, dedupe docker build/push, add testify dev dependency

- pin every third-party action and the buildkit builder image by digest/sha
- add least-privilege permissions blocks per job (upload-sarif, release, ghcr push)
- simplify ci workflows
- add a concurrency group to cancel superseded test-workflow runs
- add github.com/stretchr/testify as a real (test-only) go.mod dependency so
  dependabot's gomod ecosystem and setup-go's module cache have something to do

* ci: pin golangci-lint via an isolated tools/go.mod submodule

- add tools/go.mod as a separate module with a 'tool' directive pinning
  golangci-lint v2.13.1, keeping its large dependency tree and Go version
  requirement out of the project's own go.mod/go.sum
- tools/go.mod will later also host other development tools like e.g.
  oapi-codegen and will it make easy to pin all tool versions in a
  central place
- 'run tests' workflow now resolves the golangci-lint version dynamically
  from tools/go.mod (via go list -m) and passes it to golangci-lint-action,
  so CI and a local 'go tool -modfile=tools/go.mod golangci-lint run' always
  use the exact same version, single source of truth, no drift
- keep golangci-lint-action rather than 'go install': it downloads a
  prebuilt binary, which is faster than compiling golangci-lint from source
  on every cache-cold run
- track tools/go.mod as its own dependabot gomod entry, separate from the
  project's dependencies

3 of 6 relevant lines covered (50.0%)

1.0 hits per line

Jobs
ID Job ID Ran Files Coverage
1 32466339235.1 1
50.0
 GitHub Action Run
Source Files on build 32466339235