Skip to content

ci: harden workflows, upgrade actions, fix caching#19

Merged
umputun merged 1 commit intomasterfrom
ci/workflow-hardening
Mar 16, 2026
Merged

ci: harden workflows, upgrade actions, fix caching#19
umputun merged 1 commit intomasterfrom
ci/workflow-hardening

Conversation

@paskal
Copy link
Contributor

@paskal paskal commented Mar 7, 2026

Changes

  • Reorder checkout before setup-go for proper dependency caching
  • Upgrade all GitHub Actions to latest versions (checkout@v6, setup-go@v6, golangci-lint-action@v9)
  • Add permissions: contents: read for least-privilege security
  • Add persist-credentials: false to checkout steps
  • Fix goveralls pattern (combined install + submit into single step)
  • Upgrade golangci-lint-action from v7 to v9 with golangci-lint v2.11.1
  • Remove unnecessary skip-pkg-cache: true (setup-go@v6 handles caching)

Verified golangci-lint passes with v2.11.1.

@paskal paskal requested a review from umputun as a code owner March 7, 2026 19:27
@umputun umputun merged commit 27dc4b2 into master Mar 16, 2026
4 checks passed
@umputun umputun deleted the ci/workflow-hardening branch March 16, 2026 06:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants