more configs

Author: firefart

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,42 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "22 8 * * 5"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ["go"]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "stable"
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3

.github/workflows/codeql.yml

@@ -3,6 +3,7 @@ on: [push, pull_request]
 jobs:
   build:
     name: Build
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
@@ -13,12 +14,16 @@ jobs:
         with:
           go-version: "stable"
 
+      - name: Install Task
+        uses: arduino/setup-task@v2
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Get dependencies
-        run: |
-          go get -v -t -d ./...
+        run: task deps
 
       - name: Build
-        run: make build
+        run: task build
 
       - name: Test
-        run: make test
+        run: task test

.github/workflows/go.yml

@@ -1,8 +1,14 @@
 name: golangci-lint
-on: [push, workflow_dispatch]
+on: [push, pull_request, workflow_dispatch]
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 jobs:
   golangci:
     name: lint
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -15,3 +21,4 @@ jobs:
         uses: golangci/golangci-lint-action@v7
         with:
           version: latest
+          args: --timeout=5m

.github/workflows/golangci-lint.yml

@@ -8,6 +8,7 @@ on:
 jobs:
   update:
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     steps:
       - name: checkout
         uses: actions/checkout@v4
@@ -19,18 +20,22 @@ jobs:
         with:
           go-version: "stable"
 
+      - name: Install Task
+        uses: arduino/setup-task@v2
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: update
-        run: |
-          make update
+        run: task update
 
       - name: setup git config
         run: |
           git config user.name "Github"
           git config user.email "<>"
 
       - name: commit changes
-        # need to override the default shell so we can check
-        # for error codes. Otherwise it will always fail if
+        # need to override the default shell, so we can check
+        # for error codes. Otherwise, it will always fail if
         # one command returns an error code other than 0
         shell: bash --noprofile --norc -o pipefail {0}
         run: |
@@ -39,7 +44,7 @@ jobs:
           if [ $exit_status -eq 0 ]; then
             echo "nothing has changed"
           else
-            git add go.mod go.sum
+            git add .
             git commit -m "auto update from github actions"
             git push origin main
           fi

.github/workflows/update.yml

@@ -0,0 +1,19 @@
+name: yamllint
+on:
+  push:
+    paths:
+      - "**.yml"
+      - "**.yaml"
+  pull_request:
+  workflow_dispatch:
+jobs:
+  yamllint:
+    name: yamllint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: karancode/yamllint-github-action@master
+        with:
+          # fail on warnings and errors
+          yamllint_strict: true
+          yamllint_config_filepath: ".yamllint.yml"