chore(i): workflows: update to shared workflows

Author: grokify

.github/workflows/go-ci.yaml

@@ -1,26 +1,25 @@
-name: CI
+name: Go CI
+permissions:
+  contents: read
 on:
   push:
     branches:
       - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-ci.yaml'
   pull_request:
     branches:
       - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-ci.yaml'
   workflow_dispatch:
+
 jobs:
-  test:
-    strategy:
-      matrix:
-        go-version: [1.26.x, 1.24.x]
-        platform: [ubuntu-latest, macos-latest, windows-latest]
-    runs-on: ${{ matrix.platform }}
-    steps:
-    - name: Install Go
-      if: success()
-      uses: actions/setup-go@v6
-      with:
-        go-version: ${{ matrix.go-version }}
-    - name: Checkout code
-      uses: actions/checkout@v6
-    - name: Run tests
-      run: go test -v -covermode=count ./...
+  ci:
+    uses: plexusone/.github/.github/workflows/go-ci.yaml@main

.github/workflows/go-lint.yaml

@@ -1,16 +1,27 @@
-name: lint
-on: [push, pull_request]
+name: Go Lint
+permissions:
+  contents: read
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.golangci.yml'
+      - '.github/workflows/go-lint.yaml'
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.golangci.yml'
+      - '.github/workflows/go-lint.yaml'
+  workflow_dispatch:
+
 jobs:
   lint:
-    strategy:
-      matrix:
-        go-version: [1.x]
-        platform: [ubuntu-latest]
-    runs-on: ${{ matrix.platform }}
-    steps:
-    - uses: actions/checkout@v6
-    - name: golangci-lint
-      uses: golangci/golangci-lint-action@v9
-      with:
-        version: latest
-        args: --timeout 3m --max-same-issues 0 --max-issues-per-linter 0 --verbose
+    uses: plexusone/.github/.github/workflows/go-lint.yaml@main

.github/workflows/go-sast-codeql.yaml

@@ -1,50 +1,29 @@
-name: "CodeQL SAST Analysis"
-
+name: Go SAST (CodeQL)
+permissions:
+  actions: read
+  contents: read
+  security-events: write
 on:
   push:
     branches:
-      - master
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-sast-codeql.yaml'
   pull_request:
     branches:
-      - master
+      - main
+    paths:
+      - '**.go'
+      - 'go.mod'
+      - 'go.sum'
+      - '.github/workflows/go-sast-codeql.yaml'
   schedule:
-    - cron: '30 1 * * 0'
+    - cron: '0 6 * * 1'
   workflow_dispatch:
 
 jobs:
-  analyze:
-    name: Analyze
-    runs-on: ubuntu-latest
-    timeout-minutes: 360
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
-
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ['go']
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v6
-
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
-      with:
-        languages: ${{ matrix.language }}
-        queries: security-extended,security-and-quality
-
-    - name: Set up Go
-      uses: actions/setup-go@v6
-      with:
-        go-version: '1.24.x'
-
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v4
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
-      with:
-        category: "/language:${{matrix.language}}"
+  sast:
+    uses: plexusone/.github/.github/workflows/go-sast-codeql.yaml@main