Skip to content

ci: harden workflows, upgrade actions, fix caching#13

Closed
paskal wants to merge 1 commit intoumputun:masterfrom
paskal:ci/workflow-hardening
Closed

ci: harden workflows, upgrade actions, fix caching#13
paskal wants to merge 1 commit intoumputun:masterfrom
paskal:ci/workflow-hardening

Conversation

@paskal
Copy link
Contributor

@paskal paskal commented Mar 7, 2026

Summary

  • add explicit permissions (contents: read) for least-privilege
  • upgrade actions to latest major versions (checkout@v6, setup-go@v6, setup-qemu-action@v4, setup-buildx-action@v4)
  • add persist-credentials: false to checkout
  • reorder steps: checkout before setup-go for proper caching
  • replace manual golangci-lint install with golangci-lint-action@v6
  • combine goveralls install and coverage submission into single step

@paskal paskal force-pushed the ci/workflow-hardening branch 2 times, most recently from 1e7f893 to 47720bc Compare March 14, 2026 07:53
@paskal paskal force-pushed the ci/workflow-hardening branch from 47720bc to 8e5e315 Compare March 14, 2026 08:00
@paskal paskal closed this Mar 14, 2026
@paskal paskal deleted the ci/workflow-hardening branch March 14, 2026 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant