Skip to content

chore: harden repository maintenance and releases - #6

Merged
Rat0323 merged 1 commit into
mainfrom
chore/repository-hardening
Aug 16, 2026
Merged

chore: harden repository maintenance and releases#6
Rat0323 merged 1 commit into
mainfrom
chore/repository-hardening

Conversation

@Rat0323

@Rat0323 Rat0323 commented Aug 16, 2026

Copy link
Copy Markdown
Owner

Summary

  • Add SECURITY.md, CONTRIBUTING.md, CODEOWNERS, issue forms, and a pull request template.
  • Add Dependabot configuration for Go modules and GitHub Actions.
  • Add a versioned CHANGELOG and extract release notes from it during tagged releases.
  • Harden Actions permissions, pin third-party actions to full commit SHAs, add a stable ci summary check, and stop retaining PR build artifacts.
  • Create draft releases, verify all six archives and checksums, then publish only after validation.

Validation

  • go test ./...
  • go test -race ./...
  • go vet ./...
  • go test ./.github/scripts/extract-release-notes
  • go vet ./.github/scripts/extract-release-notes
  • actionlint
  • Markdown lint and Prettier checks

After this PR merges, repository security settings and branch rules will be enabled separately.

@Rat0323
Rat0323 merged commit 890d7bf into main Aug 16, 2026
9 checks passed
@Rat0323
Rat0323 deleted the chore/repository-hardening branch August 16, 2026 05:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant