nats-io / nkeys

83%

master: 82%

LAST BUILD ON BRANCH wq/use-runtime-secret

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• 0_4_2
• 0_4_3
• 0_4_4
• 0_4_6
• add-dep-new-version
• add_dependency_doc
• arch-bins
• bump
• bump-crypto
• bump-staticcheck
• bump-x/crypto-version
• crypto
• curve2
• daniele/check-public-key-len
• ecies
• empty
• fix-50
• fix-67
• fix-ci
• fix-release-action
• fix-releaser
• fmt-fix
• gcolliso-update-maintainers
• go-updates
• goreleaser-update
• main
• master
• mgr
• mod
• move_creds_parsing
• nkey-role-validation
• no_strings
• normalize-curve
• parallel-vanity
• pdp/bump-staticcheck
• pdp/github-actions
• pdp/yaml-engineering
• pub
• readme
• release_0_1_3
• release_0_1_4
• release_0_2_0
• release_0_3_0
• releaser
• strip-jwt-ws
• tidy
• travis
• update
• update-crypto
• update_go_mod
• updates
• v0.0.1
• v0.0.2
• v0.1.0
• v0.1.2
• v0.1.3
• v0.1.4
• v0.2.0
• v0.3.0
• v0.4.0
• v0.4.1
• v0.4.2
• v0.4.3
• wallyqs-patch-1
• wq/ci-stable-go
• wq/use-runtime-secret
• xkeys

Build # 40882577242

Build Type

Pull #92

github

Committed by wallyqs

Commit Message

ci: use stable Go from the build matrix

staticcheck@latest (v0.8.2) requires go >= 1.26, so installing it under
the go.mod version (1.25.0) with GOTOOLCHAIN=local fails. Use the
matrix's go: stable instead of go.mod so CI tooling tracks current Go
without raising the module's minimum version.

Signed-off-by: Waldemar Quevedo <wally@nats.io>

Pull Request Pull Request #92: Use runtime/secret to erase transient key material

Coverage Stats

123 of 130 new or added lines in 4 files covered. (94.62%)

449 of 539 relevant lines covered (83.3%)

31.48 hits per line