synackd / go-kargs / 34548905656

96%

push

github

ci: add local checks and GitHub Actions for a source-only library (#4)

* ci: add local checks and GitHub Actions for a source-only library

Previously the project had no build step, no local check harness, and no CI.
Add a Makefile and GitHub Actions workflows so local development and pull
requests run the same checks.

Local:

- Makefile with test, race, coverage, vet, lint, govulncheck, mod, check,
  and clean targets (each guarded by a command-presence check). No build or
  install targets, since consumers fetch the module by tag.
- .golangci.yml on the golangci-lint v2 schema enabling a small set of
  high-signal linters plus gofmt/goimports.
- .gitignore for editor, OS, and coverage artifacts.

CI (.github/workflows/, every third-party action pinned to a commit SHA with
a version comment for supply-chain safety and Renovate updates):

- test.yml: unit-test matrix on Go 1.17 (the declared minimum) and stable,
  with separate race and vet jobs and an aggregate gate for branch
  protection.
- coverage.yaml: run coverage, publish the total to the job summary, and
  upload to Coveralls.
- lint.yml: golangci-lint plus a go.mod/go.sum tidiness check, with an
  aggregate gate.
- govulncheck.yaml: run the official govulncheck action against ./...
- codeql.yaml: CodeQL analysis for Go on PRs, main, and a weekly schedule.
- scorecard.yaml: OpenSSF Scorecard, publishing results only on trusted
  (non-pull_request) events.
- release.yml: on version tags, validate then create a GitHub Release with
  auto-generated notes, marking hyphenated SemVer tags as pre-releases. No
  binaries or archives are produced because the module is consumed as source.

Dependency maintenance:

- renovate.json to keep Go modules and GitHub Actions (with digest pinning)
  up to date via grouped, scheduled PRs, leaving Dependabot for security
  alerts.

* fix: modernize codebase and correct parsing edge cases

Update Go version from 1.17 to 1.23.10 and add GOTOOLCHAIN support
to ens... (continued)

6 of 7 new or added lines in 1 file covered. (85.71%)

329 of 344 relevant lines covered (95.64%)

85.32 hits per line