Skip to content

Add open source project infrastructure#486

Merged
bborn merged 2 commits intomainfrom
chore/oss-infrastructure
Mar 3, 2026
Merged

Add open source project infrastructure#486
bborn merged 2 commits intomainfrom
chore/oss-infrastructure

Conversation

@bborn
Copy link
Owner

@bborn bborn commented Mar 3, 2026

Summary

  • MIT License added
  • GoReleaser replaces manual cross-compilation in release workflow — produces archives for ty (darwin/linux/windows) and taskd (darwin/linux) with checksums and changelog
  • CI hardened with race detector, coverage profiling, govulncheck job, and permissions: contents: read
  • Linting improved — enabled gosec, misspell, bodyclose, unconvert, errname; added goimports formatter with local-prefixes; fixed import ordering across all Go files
  • Dependabot configured for weekly Go module and GitHub Actions updates
  • Community files added: CONTRIBUTING.md, SECURITY.md
  • Makefile gains vet, vuln, audit, coverage targets; version ldflags injected into all builds; dead release target removed
  • taskd gets version variable for ldflags injection + startup log
  • README gets CI, Go Reference, and Go Report Card badges

Test plan

  • make vet — passes
  • make lint — 0 issues
  • make test — all tests pass with -race
  • make build — builds both binaries with version ldflags
  • Push a tag (e.g. v0.x.x-rc1) to validate goreleaser release workflow end-to-end

🤖 Generated with Claude Code

bborn and others added 2 commits March 3, 2026 07:24
- Add MIT license
- Add GoReleaser config for automated cross-platform releases
- Replace manual release workflow with goreleaser-action
- Harden CI: race detector, coverage, govulncheck job, permissions
- Improve golangci-lint: enable gosec, misspell, bodyclose, unconvert,
  errname linters; add goimports formatter with local-prefixes
- Add dependabot for Go modules and GitHub Actions
- Add CONTRIBUTING.md and SECURITY.md
- Add Makefile targets: vet, vuln, audit, coverage; inject version
  ldflags into all builds; remove redundant release target
- Add version variable to taskd for ldflags injection
- Add .gitignore entries for dist/ and coverage artifacts
- Add CI/Go Reference/Go Report Card badges to README
- Fix goimports ordering across all Go files

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- golang.org/x/crypto v0.37.0 → v0.45.0 (unbounded memory in ssh)
- golang.org/x/net v0.36.0 → v0.47.0 (input neutralization in html)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@bborn bborn merged commit c028e05 into main Mar 3, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant