Merge pull request #8 from jakec-dev/feat/I-4-ci-tests

feat: add github workflows for tests

Author: jakec-dev

.gitattributes

@@ -0,0 +1 @@
+*.go text eol=lf

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/workflow.yml

@@ -0,0 +1,48 @@
+name: CI Workflow
+
+on:
+  pull_request:
+    branches:
+      - develop
+      - master
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        go-version: ['1.24.3']
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version: ${{ matrix.go-version }}
+        cache: true
+
+    - name: Display Go version
+      run: go version
+
+    - name: Set up golangci-lint
+      uses: golangci/golangci-lint-action@v8
+      with:
+        version: v2.1
+
+    - name: Run linting
+      run: make lint
+    
+    - name: Run tests
+      run: make test
+    
+    - name: Run audit checks
+      run: make audit
+    
+    - name: Verify build
+      run: make build
+    
+    - name: Upload coverage
+      uses: actions/upload-artifact@v4
+      with:
+        name: coverage-${{ matrix.go-version }}
+        path: coverage.html

CONTRIBUTING.md

@@ -73,6 +73,14 @@ This project uses [lefthook](https://github.com/evilmartians/lefthook) for Git h
 - `make upgradeable` - Check for dependency updates
 - `make build-static` - Build static binary for containers
 
+### Testing GitHub Actions Locally
+
+You can test GitHub Actions workflows locally using [act](https://github.com/nektos/act):
+
+```sh
+act pull_request    # Simulate PR workflow
+```
+
 ## Contributing Guidelines
 
 - Feature requests and bug reports are welcome via GitHub Issues
@@ -93,6 +101,9 @@ internal/               # Core logic (private to this module)
 build/                  # Build artifacts, npm wrapper (future)
 bin/                    # Compiled binaries (git-ignored)
 dist/                   # GoReleaser output (git-ignored)
+.github/
+  ├── workflows/        # GitHub Actions CI/CD pipelines
+  └── dependabot.yml    # Automated dependency updates
 ```
 
 ## Pull Request Process
@@ -103,6 +114,16 @@ dist/                   # GoReleaser output (git-ignored)
 4. Submit PR with clear description of changes and motivation
 5. Ensure CI checks pass (uses same Make targets)
 
+### CI/CD Pipeline
+
+Pull requests automatically trigger GitHub Actions workflows that run:
+- `make lint` - Code style and static analysis
+- `make test` - Unit tests with race detection and coverage
+- `make audit` - Security scanning and dependency verification
+- `make build` - Binary compilation verification
+
+Coverage reports are uploaded as artifacts for each workflow run.
+
 ## Release Process
 
 Releases are automated via GoReleaser when a new tag is pushed:

README.md

@@ -1,5 +1,7 @@
 # aws-local-sync
 
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/jakec-dev/aws-local-sync/badge)](https://scorecard.dev/viewer/?uri=github.com/jakec-dev/aws-local-sync)
+
 **aws-local-sync** is a high-performance CLI tool that syncs data from AWS services into your local development environment. It's designed to be **simple**, **fast**, **reliable**, and **developer-friendly**, with support for plugins, caching, and seamless workflow integration.
 
 Key features: