mirror of
https://github.com/samber/cc-skills-golang.git
synced 2026-09-14 21:16:31 +03:00
Samuel BertheandGitHub
5ab41df4d9
* docs: add CI/AI-driven code review section to README * chore: add .worktrees/ to .gitignore * feat: add AI-driven code review workflow with skill plugin - New GOLANG-AI-DRIVEN-REVIEW.md doc with 6-job Claude Code Action workflow (quality, correctness, security, quality-depth, ci-diagnosis, discuss) - New assets: claude-code-review.yml workflow + copilot-review-instructions.md - Workflow features: per-event concurrency lanes, 15min timeout, sticky comments, skill loading via npx skills add -a claude-code, Skill() invocation syntax in prompts - Cross-references to golang-continuous-integration in 7 skills (security, testing, linter, concurrency, error-handling, code-style, safety) - Tighten CI security: add permissions blocks to lint/security-scan, remove unused id-token from update workflows, add SARIF upload + exit-code to Trivy/Bearer
29 lines
626 B
YAML
29 lines
626 B
YAML
name: Security scan skills
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths: ['skills/**']
|
|
pull_request:
|
|
paths: ['skills/**']
|
|
schedule:
|
|
- cron: '0 10 1 * *' # 1st of every month at 10am UTC
|
|
workflow_dispatch: {}
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
snyk-agent-scan:
|
|
if: github.event_name != 'schedule' || github.repository_owner == 'samber'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- uses: astral-sh/setup-uv@v7
|
|
|
|
- name: Run Snyk Agent Scan
|
|
run: uvx snyk-agent-scan@latest --ci --skills ./skills
|
|
env:
|
|
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
|