Skip to content

Conversation

@tangrufus
Copy link
Member

No description provided.


- run: go generate ./...

- uses: typisttech/.github/.github/actions/create-auto-merged-pull-request@v3

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Go Generate' step
Uses Step
uses 'typisttech/.github/.github/actions/create-auto-merged-pull-request' with ref 'v3', not a pinned commit hash
contents: write
pull-requests: read
steps:
- uses: release-drafter/release-drafter@v6

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Release Drafter' step
Uses Step
uses 'release-drafter/release-drafter' with ref 'v6', not a pinned commit hash
@tangrufus tangrufus marked this pull request as ready for review October 26, 2025 13:11
Copilot AI review requested due to automatic review settings October 26, 2025 13:11
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the GitHub Actions workflows from typisttech/.github v2 to v3, consolidating and reorganizing the CI/CD pipeline configuration. The update standardizes workflow naming conventions, introduces new workflows for auditing and release drafting, and migrates to reusable workflow patterns.

Key Changes:

  • Replaces inline workflow implementations with reusable workflows from the central .github repository
  • Introduces new audit.yml and release-drafter.yml workflows for vulnerability scanning and release management
  • Consolidates linting and testing workflows with simplified configurations

Reviewed Changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
README.md Updates workflow badge references from go.yml to test.yml and capitalizes "License" badge label
.github/workflows/test.yml Renames workflow from "Go" to "Test", removes golangci-lint job, and simplifies test execution
.github/workflows/lint.yml Replaces govulncheck implementation with reusable workflow from v3
.github/workflows/go-proxy.yml Migrates to reusable workflow pattern and updates name capitalization
.github/workflows/go-generate.yml Replaces reusable workflow call with inline implementation using v3 action
.github/workflows/dependabot-auto-merge.yml Updates to v3 reusable workflow and standardizes YAML structure
.github/workflows/release-drafter.yml New workflow for automated release draft creation
.github/workflows/audit.yml New workflow for scheduled security audits
.github/release-drafter.yml Configuration file extending central release drafter settings

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Co-authored-by: Copilot <[email protected]>
Copilot AI review requested due to automatic review settings October 26, 2025 13:13
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated no new comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@tangrufus tangrufus merged commit 2dcd404 into main Oct 26, 2025
9 of 10 checks passed
@tangrufus tangrufus deleted the gha branch October 26, 2025 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants