golang-continuous-integration

To set up GitHub Actions for Go, you establish CI/CD pipelines covering testing, linting, SAST/security scanning, and coverage reporting. This Skill generates workflows with race-enabled tests, govulncheck, and CodeQL to ensure code correctness and vulnerability detection before production deployment.

Automating Go releases with GoReleaser involves configuring safe release automation using least-privilege permissions and pinned action versions. This Skill sets up GoReleaser workflows alongside optional Docker builds with provenance, SBOM, and vulnerability scanning for secure artifact distribution.

Go mod tidy consistency checking prevents silent regressions by verifying that dependencies remain properly aligned. This Skill implements quality gates that diff go mod tidy results within your CI pipeline, catching uncommitted dependency changes before they reach production.

Yes, you can add security tools like govulncheck and Bearer to existing Go CI pipelines. This Skill audits your current workflows and integrates missing quality gates, including CodeQL and dependency update automation, without duplicating existing pipeline steps.

Pinning GitHub Actions versions is required for safe Go continuous integration to prevent supply chain attacks. This Skill establishes release automation using least-privilege permissions and pinned action versions to ensure your CI/CD pipeline remains secure and reproducible.