Skip to content

[Sync] Update project files from source repository (9def984)#12

Merged
mrz1836 merged 1 commit intomainfrom
chore/sync-files-bsv-blockchain-services-20260309-120624-9def984
Mar 9, 2026
Merged

[Sync] Update project files from source repository (9def984)#12
mrz1836 merged 1 commit intomainfrom
chore/sync-files-bsv-blockchain-services-20260309-120624-9def984

Conversation

@mrz1836
Copy link
Copy Markdown
Contributor

@mrz1836 mrz1836 commented Mar 9, 2026

What Changed

  • Added new github-token input parameter to setup-go-with-cache action for private module authentication, with default value of empty string
  • Added new step "🔐 Configure private module authentication" that conditionally runs when both github-token input and GOPRIVATE environment variable are set
  • Configured git to use token-based HTTPS authentication for GitHub URLs via git config --global url substitution
  • Automatically set GONOSUMDB to match GOPRIVATE if not explicitly configured
  • Updated parse-env action to use ENV_JSON environment variable instead of direct shell parameter substitution

Why It Was Necessary

  • Enable workflows to authenticate and fetch private Go modules from GitHub repositories during build and test operations
  • Improve security by using GitHub tokens for private module access instead of requiring manual git configuration
  • Prevent checksum database lookups for private modules by automatically configuring GONOSUMDB to match GOPRIVATE patterns

Testing Performed

  • Verified the conditional step only executes when both github-token input is provided and GOPRIVATE is set in the environment
  • Validated git URL rewriting configuration correctly substitutes HTTPS URLs with token-based authentication
  • Confirmed GONOSUMDB environment variable is properly set when not explicitly configured

Impact / Risk

  • Low Risk: Changes are purely additive - existing workflows without private modules are unaffected
  • Backward Compatible: New github-token input defaults to empty string, making authentication opt-in
  • Security Improvement: Tokens are passed via environment variables and masked in logs, following GitHub Actions security best practices

@mrz1836 mrz1836 self-assigned this Mar 9, 2026
@mrz1836 mrz1836 added automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps labels Mar 9, 2026
@github-actions github-actions bot added size/M Medium change (51–200 lines) update General updates labels Mar 9, 2026
@mrz1836 mrz1836 merged commit 0066d74 into main Mar 9, 2026
41 of 43 checks passed
@github-actions github-actions bot deleted the chore/sync-files-bsv-blockchain-services-20260309-120624-9def984 branch March 9, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps size/M Medium change (51–200 lines) update General updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant