Merge pull request #366 from fedora-infra/meta

MetaSource (or MDAPI v4.0.0) is here

Author: gridhead

.coveragerc

@@ -0,0 +1,32 @@
+---
+name: Checking overall codebase quality
+
+on: [push, pull_request]
+
+jobs:
+  ci-qlty:
+    runs-on: ubuntu-latest
+    container: fedora:latest
+    strategy:
+      fail-fast: false
+    steps:
+      - name: Checkout the codebase current state
+        uses: actions/checkout@v4
+      - name: Establish the containerized Golang development environment
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.24.5"
+      - name: Install the system dependencies
+        run: dnf install go git createrepo_c-devel --setopt=install_weak_deps=False --assumeyes
+      - name: Analyze codebase for potential issues and suspicious constructs
+        run: go vet ./...
+      - name: Ensure codebase adherence with standard Golang formatting style
+        run: go fmt ./...
+      - name: Install the base dependencies for staticcheck
+        run: go install honnef.co/go/tools/cmd/staticcheck@latest
+      - name: Evaluate codebase for deeper inefficiencies and potential bugs
+        run: staticcheck ./...
+      - name: Install the base dependencies for staticcheck
+        run: go install github.com/securego/gosec/v2/cmd/gosec@latest
+      - name: Inspect codebase for potential security vulnerabilities
+        run: gosec -exclude-generated ./...

.github/workflows/main.yml

@@ -1,132 +1,25 @@
-# Byte-compiled / optimized / DLL files
-__pycache__/
-*.py[cod]
-*$py.class
-
-# C extensions
+# If you prefer the allow list template instead of the deny list, see community template:
+# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
+#
+# Binaries for programs and plugins
+*.exe
+*.exe~
+*.dll
 *.so
+*.dylib
 
-# Distribution / packaging
-.Python
-build/
-develop-eggs/
-dist/
-downloads/
-eggs/
-.eggs/
-lib/
-lib64/
-parts/
-sdist/
-var/
-wheels/
-pip-wheel-metadata/
-share/python-wheels/
-*.egg-info/
-.installed.cfg
-*.egg
-MANIFEST
-
-# PyInstaller
-#  Usually these files are written by a python script from a template
-#  before PyInstaller builds the exe, so as to inject date/other infos into it.
-*.manifest
-*.spec
-
-# Installer logs
-pip-log.txt
-pip-delete-this-directory.txt
-
-# Unit test / coverage reports
-htmlcov/
-.tox/
-.nox/
-.coverage
-.coverage.*
-.cache
-nosetests.xml
-coverage.xml
-*.cover
-*.py,cover
-.hypothesis/
-.pytest_cache/
-
-# Translations
-*.mo
-*.pot
-
-# Django stuff:
-*.log
-local_settings.py
-db.sqlite3
-db.sqlite3-journal
-
-# Flask stuff:
-instance/
-.webassets-cache
-
-# Scrapy stuff:
-.scrapy
-
-# Sphinx documentation
-docs/_build/
-
-# PyBuilder
-target/
+# Test binary, built with `go test -c`
+*.test
 
-# Jupyter Notebook
-.ipynb_checkpoints
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
 
-# IPython
-profile_default/
-ipython_config.py
+# Dependency directories (remove the comment below to include it)
+# vendor/
 
-# pyenv
-.python-version
+# Go workspace file
+go.work
+go.work.sum
 
-# pipenv
-#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
-#   However, in case of collaboration, if having platform-specific dependencies or dependencies
-#   having no cross-platform support, pipenv may install dependencies that don't work, or not
-#   install all needed dependencies.
-#Pipfile.lock
-
-# PEP 582; used by e.g. github.com/David-OConnor/pyflow
-__pypackages__/
-
-# Celery stuff
-celerybeat-schedule
-celerybeat.pid
-
-# SageMath parsed files
-*.sage.py
-
-# Environments
+# env file
 .env
-.venv
-env/
-venv/
-ENV/
-env.bak/
-venv.bak/
-
-# Spyder project settings
-.spyderproject
-.spyproject
-
-# Rope project settings
-.ropeproject
-
-# mkdocs documentation
-/site
-
-# mypy
-.mypy_cache/
-.dmypy.json
-dmypy.json
-
-# Pyre type checker
-.pyre/
-
-# JetBrains configuration files
-.idea/

.github/workflows/qlty.yml

@@ -0,0 +1,29 @@
+LABEL maintainer "Akashdeep Dhar <[email protected]>"
+
+# Builder image
+
+FROM registry.fedoraproject.org/fedora-minimal:42 AS builder
+
+RUN dnf update --assumeyes && dnf install wget createrepo_c-devel gcc tar gzip golang git --assumeyes --setopt=install_weak_deps=False && dnf clean all
+
+WORKDIR /metasource
+
+COPY . .
+
+ENV CGO_ENABLED=1 GOOS=linux
+
+RUN go mod download && go build -o meta
+
+# Runtime image
+
+FROM registry.fedoraproject.org/fedora-minimal:42 as runtime
+
+RUN dnf update --assumeyes && dnf install createrepo_c-devel --assumeyes --setopt=install_weak_deps=False && dnf clean all && mkdir --parents /db
+
+VOLUME ["/db"]
+
+COPY --from=builder /metasource/meta /metasource/meta
+
+EXPOSE 8080
+
+ENTRYPOINT ["/metasource/meta"]