mirror of https://github.com/vernonkeenan/lib
lib is publicly mirrored on code.tnxs.net and had no CI at all. Add .github/workflows/push.yml gating every push/PR on the private self-hosted runner (ADR-KV-004): a test job (go build/vet/test) and a gitleaks secret-scan job using the official docker image directly (gitleaks/gitleaks-action needs an org license we don't have). The gitleaks history scan surfaced 6 findings, all illustrative `example:` JWTs hardcoded by swagger-codegen into the generated Kazoo API client models and the vendored Kazoo swagger spec — placeholders from the vendor's public docs, not real credentials. Added a minimal .gitleaks.toml allowlist scoped to just those four generated files so CI runs clean without masking real findings elsewhere. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .github/workflows | ||
| .vscode | ||
| api | ||
| app | ||
| build | ||
| swagger | ||
| .gitignore | ||
| .gitleaks.toml | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| go.mod | ||
| go.sum | ||
README.md
lib
vernonkeenan Shared Libraries (go)
Dependent Systems
The Gitea server https://code.tnxs.net must be up and running with admin access.
Update Procedure
Prerequisite: All the other repos are cloned locally in adjacent directories.
-
Increment branch number in local repo
-
Generate all OpenAPI libraries and then cleanup modules
make swagger
go get -u -f ./...
go mod tidy
- Commit and push new branch to GitHub
- On GitHub goto https://github.com/vernonkeenan/lib/settings/branches set the new branch to default.
- On GitHub goto https://github.com/vernonkeenan/lib/releases and publish a new release for the new branch. Make the new tag the branch name.
- On Gitea goto https://code.tnxs.net/vernonkeenan/lib/settings and click Synchronize Now.
- Update the
go.modline withcode.tnxs.net/vernonkeenan/libin each project to match the latest version.