ci: sync with netresearch/.github templates/go-app#236
Conversation
Auto-generated by scripts/sync-template.sh. Any changes you want to keep must be declared in .github/template.yaml's intentional-drift: list — the check-template-drift.yml job will otherwise revert them on next sync. Signed-off-by: Sebastian Mendel <info@sebastianmendel.de>
|
Note Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported. |
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned FilesNone |
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Automated approval for maintainer PR
All automated quality gates passed. See SECURITY_CONTROLS.md for compensating controls.
There was a problem hiding this comment.
Pull request overview
Syncs this repository’s OpenSSF Scorecard workflow with the canonical netresearch/.github go-app template by tightening default GitHub Actions token permissions at the workflow level while keeping the required permissions explicitly set on the Scorecard job (reusable workflow call).
Changes:
- Change workflow-level
permissionsfrom broadread-allto an empty set ({}), relying on explicit job-level permissions for the Scorecard job.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #236 +/- ##
=======================================
Coverage 75.39% 75.39%
=======================================
Files 11 11
Lines 512 512
=======================================
Hits 386 386
Misses 101 101
Partials 25 25
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Auto-opened by sync-template.sh. Brings this repo back into alignment with the canonical
go-apptemplate innetresearch/.github.To keep any diverging files, add their paths to
.github/template.yaml'sintentional-drift:list before merging — otherwise the next sync run will revert them.