Skip to content

ci: harden workflows, upgrade actions, fix caching - #56

Merged
umputun merged 2 commits into
umputun:masterfrom
paskal:ci/workflow-hardening
Mar 16, 2026
Merged

ci: harden workflows, upgrade actions, fix caching#56
umputun merged 2 commits into
umputun:masterfrom
paskal:ci/workflow-hardening

Conversation

@paskal

@paskal paskal commented Mar 7, 2026

Copy link
Copy Markdown
Contributor

Changes

  • Reorder checkout before setup-go for proper dependency caching
  • Upgrade all GitHub Actions to latest versions (checkout@v6, setup-go@v6, golangci-lint-action@v9, setup-qemu@v4, setup-buildx@v4)
  • Add permissions: contents: read for least-privilege security
  • Add persist-credentials: false to checkout steps
  • Upgrade golangci-lint to v2.11.1

Note: golangci-lint v2.11.1 reports 3 gosec G118 issues in test files (unused context cancel functions). These are pre-existing code issues, not introduced by this PR.

Verified golangci-lint config is already v2 format.

@umputun
umputun merged commit 170ab4b into umputun:master Mar 16, 2026
2 checks passed
@paskal
paskal deleted the ci/workflow-hardening branch March 16, 2026 07:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants