Skip to content

ci: harden workflows, upgrade actions, fix caching#19

Open
paskal wants to merge 1 commit intomasterfrom
ci/workflow-hardening
Open

ci: harden workflows, upgrade actions, fix caching#19
paskal wants to merge 1 commit intomasterfrom
ci/workflow-hardening

Conversation

@paskal
Copy link

@paskal paskal commented Mar 7, 2026

Changes

  • Reorder checkout before setup-go for proper dependency caching
  • Upgrade all GitHub Actions to latest versions (checkout@v6, setup-go@v6, golangci-lint-action@v9)
  • Add permissions: contents: read for least-privilege security
  • Add persist-credentials: false to checkout steps
  • Fix goveralls pattern (combined install + submit into single step)
  • Upgrade golangci-lint-action from v7 to v9 with golangci-lint v2.11.1
  • Remove unnecessary skip-pkg-cache: true (setup-go@v6 handles caching)

Verified golangci-lint passes with v2.11.1.

@paskal paskal requested a review from umputun as a code owner March 7, 2026 19:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant