From a6f6ccaed8555f95b3d4d166e050444ad1ce81cf Mon Sep 17 00:00:00 2001 From: barelyworkingcode Date: Sat, 10 Oct 2026 15:10:03 -0700 Subject: [PATCH 1/3] Add CI: go vet and go test -race on macOS Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/test.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/test.yml diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml new file mode 100644 index 0000000..797530f --- /dev/null +++ b/.github/workflows/test.yml @@ -0,0 +1,21 @@ +name: test + +on: + push: + branches: [main] + pull_request: + +jobs: + test: + runs-on: macos-latest + steps: + - uses: actions/checkout@v4 + - uses: actions/setup-go@v5 + with: + go-version-file: go.mod + - name: Install ripgrep + run: brew install ripgrep + - name: Vet + run: go vet ./... + - name: Test + run: go test -race -count=1 ./... From 4813a0102c267a73109046579f5fc6fd81df7c92 Mon Sep 17 00:00:00 2001 From: barelyworkingcode Date: Sat, 10 Oct 2026 15:19:53 -0700 Subject: [PATCH 2/3] Pin checkout and setup-go by commit sha, as relay does Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 797530f..5cefdce 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,8 +9,8 @@ jobs: test: runs-on: macos-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-go@v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: go.mod - name: Install ripgrep From dd13658af4e77f75232eae5abda57f79c7c81cb2 Mon Sep 17 00:00:00 2001 From: barelyworkingcode Date: Sat, 10 Oct 2026 15:22:20 -0700 Subject: [PATCH 3/3] Pin the workflow token to contents: read Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/test.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 5cefdce..8b8c523 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -5,6 +5,9 @@ on: branches: [main] pull_request: +permissions: + contents: read + jobs: test: runs-on: macos-latest