ci: add staticcheck and gosec gates #3

Merged

littleisland merged 1 commit from chore/add-static-analysis into main 2026-08-26 09:10:01 +00:00

Conversation 0 Commits 1 Files changed 9 +97 -2

littleisland commented 2026-08-26 09:08:32 +00:00

Owner

Copy link

Summary

• install pinned staticcheck 2026.1 and checksum-verified gosec 2.28.0
• run both analyzers for branch pushes and main pull requests
• document justified gosec suppressions and exclude the generic G104 audit

Verification

• scripts/install-static-analysis-tools.sh
• scripts/run-static-analysis.sh
• CGO_ENABLED=0 go test ./...
• go vet ./...
• node --check static/js/app.js
• git diff --check
• branch CI run #42

## Summary - install pinned staticcheck 2026.1 and checksum-verified gosec 2.28.0 - run both analyzers for branch pushes and main pull requests - document justified gosec suppressions and exclude the generic G104 audit ## Verification - scripts/install-static-analysis-tools.sh - scripts/run-static-analysis.sh - CGO_ENABLED=0 go test ./... - go vet ./... - node --check static/js/app.js - git diff --check - branch CI run #42

littleisland added 1 commit 2026-08-26 09:08:32 +00:00

ci: add staticcheck and gosec gates c135b898d2

littleisland merged commit d0b68f3d9d into main 2026-08-26 09:10:01 +00:00

littleisland referenced this pull request from a commit 2026-08-26 09:10:03 +00:00

Merge pull request 'ci: add staticcheck and gosec gates' (#3) from chore/add-static-analysis into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

littleisland/shirushi!3

No description provided.