Skip to content

🤖 Update go-workflows to v3.0.0#639

Merged
soumeh01 merged 1 commit into
mainfrom
update-go-workflow-28506143741
Jul 1, 2026
Merged

🤖 Update go-workflows to v3.0.0#639
soumeh01 merged 1 commit into
mainfrom
update-go-workflow-28506143741

Conversation

@grasci-arm

Copy link
Copy Markdown
Contributor

Updates all common workflows references to the latest version.

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 15 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: The number of snapshots compared for the base SHA (0) and the head SHA (1) do not match. You may see unexpected additions in the diff.
Re-running this action after a short time may resolve the issue. See the documentation for more information and troubleshooting advice.

License Issues

.github/workflows/update-workflows.yml

PackageVersionLicenseIssue Type
Open-CMSIS-Pack/workflows-and-actions-collection/.github/workflows/update-workflow.yml3.0.0NullUnknown License

go.mod

PackageVersionLicenseIssue Type
github.com/aymanbagabas/go-ptyv0.2.3NullUnknown License
github.com/creack/ptyv1.1.24NullUnknown License
github.com/davecgh/go-spewv1.1.1NullUnknown License
github.com/hashicorp/go-versionv1.9.0NullUnknown License
github.com/otiai10/copyv1.14.1NullUnknown License
github.com/pmezard/go-difflibv1.0.0NullUnknown License
github.com/sirupsen/logrusv1.9.4NullUnknown License
github.com/spf13/cobrav1.10.2NullUnknown License
github.com/spf13/pflagv1.0.10NullUnknown License
github.com/stretchr/testifyv1.11.1NullUnknown License
golang.org/x/cryptov0.52.0NullUnknown License
golang.org/x/sysv0.46.0NullUnknown License
golang.org/x/termv0.44.0NullUnknown License
gopkg.in/yaml.v3v3.0.1NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
actions/Open-CMSIS-Pack/workflows-and-actions-collection/.github/workflows/update-workflow.yml 3.0.0 UnknownUnknown
gomod/github.com/aymanbagabas/go-pty v0.2.3 UnknownUnknown
gomod/github.com/creack/pty v1.1.24 UnknownUnknown
gomod/github.com/davecgh/go-spew v1.1.1 UnknownUnknown
gomod/github.com/hashicorp/go-version v1.9.0 UnknownUnknown
gomod/github.com/otiai10/copy v1.14.1 UnknownUnknown
gomod/github.com/pmezard/go-difflib v1.0.0 UnknownUnknown
gomod/github.com/sirupsen/logrus v1.9.4 UnknownUnknown
gomod/github.com/spf13/cobra v1.10.2 UnknownUnknown
gomod/github.com/spf13/pflag v1.0.10 UnknownUnknown
gomod/github.com/stretchr/testify v1.11.1 UnknownUnknown
gomod/github.com/u-root/u-root v0.16.0 🟢 7.7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 4security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Binary-Artifacts🟢 9binaries present in source code
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
gomod/golang.org/x/crypto v0.52.0 UnknownUnknown
gomod/golang.org/x/sync v0.18.0 UnknownUnknown
gomod/golang.org/x/sys v0.46.0 UnknownUnknown
gomod/golang.org/x/term v0.44.0 UnknownUnknown
gomod/gopkg.in/yaml.v3 v3.0.1 UnknownUnknown

Scanned Files

  • .github/workflows/update-workflows.yml
  • go.mod

@qltysh

qltysh Bot commented Jul 1, 2026

Copy link
Copy Markdown

Qlty


Coverage Impact

This PR will not change total coverage.

🚦 See full report on Qlty Cloud »

🛟 Help
  • Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

  • Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

  • File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

    • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Test Results

    5 files   -   1     55 suites   - 11   10s ⏱️ -1s
  323 tests ±  0    323 ✅ ±  0  0 💤 ±0  0 ❌ ±0 
1 615 runs   - 323  1 615 ✅  - 323  0 💤 ±0  0 ❌ ±0 

Results for commit 983b46e. ± Comparison against base commit 8177743.

@soumeh01 soumeh01 merged commit 79ad516 into main Jul 1, 2026
51 of 52 checks passed
@soumeh01 soumeh01 deleted the update-go-workflow-28506143741 branch July 1, 2026 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants