stripe / smokescreen / 36693755522
63%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 26
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 64.686%. Remained the same
36693755522

push

github

web-flow 
ci: publish static binaries for release tags (#333)

* ci: publish static binaries for release tags

Issue #139 asks for release binaries. When a semver release tag is created, a job tests, cross-compiles static binaries, and attaches them with SHA256SUMS and GitHub build provenance to the tag's release. Branch pushes never trigger it. Container images are left out until someone owns rebuilding them for base-image and stdlib CVEs.

The current release, v0.1.0, predates this workflow, and GitHub reads a manually dispatched workflow from the selected ref, so a manual run takes the tag as an input and checks it out instead. Published assets are never replaced, so a rerun fails rather than swapping binaries under users who already verified checksums. The version comes from Go's VCS stamping, so artifacts are written outside the checkout, where untracked files would stamp +dirty, and the job refuses to ship a binary that does not report the tag.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Committed-By-Agent: claude

* ci: smoke test the release binary before publishing

Unit tests cover the source, not the shipped artifact. Before anything is attached to the release, the linux/amd64 binary is unpacked from its tarball, must report the tag from --version, and must start and answer as smokescreen, so a broken build or package fails the job instead of being published.

Startup is confirmed with a proxied request to loopback, which smokescreen denies by default with an X-Smokescreen-Error header. That proves smokescreen itself is answering rather than just that something holds the port, and needs no network access.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Committed-By-Agent: claude

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

1872 of 2894 relevant lines covered (64.69%)

14.71 hits per line

Jobs
ID Job ID Ran Files Coverage
1 36693755522.1 26
64.69
GitHub Action Run
Source Files on build 36693755522