From 8e74676e63b206667c97e788d1fd89f332fc3814 Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Wed, 29 Oct 2025 06:27:18 -0400 Subject: [PATCH 1/2] Add GHA for 'make test' --- .github/workflows/test.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/workflows/test.yml diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml new file mode 100644 index 0000000..5862b65 --- /dev/null +++ b/.github/workflows/test.yml @@ -0,0 +1,30 @@ +name: Test + +on: + push: + branches: [ main ] + pull_request: + branches: [ main ] + +jobs: + test: + name: Run tests + runs-on: ubuntu-latest + + steps: + - name: Check out code + uses: actions/checkout@v4 + + - name: Set up Go + uses: actions/setup-go@v5 + with: + go-version-file: 'go.mod' + + - name: Run tests + run: make test + + - name: Upload coverage + uses: codecov/codecov-action@v4 + if: success() + with: + fail_ci_if_error: false From 4ff1429ba5516a8ac75dcccd4640bf5b546cd4b4 Mon Sep 17 00:00:00 2001 From: Thomas Stromberg Date: Wed, 29 Oct 2025 06:30:02 -0400 Subject: [PATCH 2/2] GHA security improvements --- .github/workflows/test.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 5862b65..3d4210a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -10,10 +10,14 @@ jobs: test: name: Run tests runs-on: ubuntu-latest + permissions: + contents: read steps: - name: Check out code uses: actions/checkout@v4 + with: + persist-credentials: false - name: Set up Go uses: actions/setup-go@v5