Merge pull request #72 from cpanato/updates

updates on ci

Author: puerco

.github/workflows/go-build-and-test.yaml

@@ -5,24 +5,31 @@ name: build-and-test
 
 on:
   pull_request:
-    branches: [ "main" ]
+    branches:
+      - "main"
+
+permissions: {}
 
 jobs:
 
   build:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
           persist-credentials: false
+
     - name: Set up Go
       uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
       with:
-        go-version: '1.24'
+        go-version: '1.25'
         check-latest: true
         cache: false
 
-
     - name: Test
       run: |
         go get -d ./...

.github/workflows/golangci-lint.yaml

@@ -7,26 +7,28 @@ on:
     branches:
       - main
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   golangci:
     name: lint
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
+
       - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
-          go-version: '1.24'
+          go-version: '1.25'
           check-latest: true
           cache: false
 
-  
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
         with:
-          version: v2.1
-
+          version: v2.7

.github/workflows/release.yaml

@@ -8,6 +8,8 @@ on:
     tags:
       - 'v*'
 
+permissions: {}
+
 jobs:
   release:
     runs-on: ubuntu-latest
@@ -18,17 +20,16 @@ jobs:
 
     env:
       GO111MODULE: on
-      COSIGN_EXPERIMENTAL: "true"
+      COSIGN_YES: "true"
 
     steps:
       - name: Check out code onto GOPATH
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-        with:
-          persist-credentials: false
 
       - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
-          go-version-file: go.mod
+          go-version: '1.25'
+          check-latest: true
           cache: false
 
       - name: Install cosign