mirror of https://github.com/lukaszraczylo/shared-actions.git synced 2026-10-13 04:58:51 +00:00

T

lukaszraczylo 6b47cbd317 feat(go-pr): add runner input and a single PR checks report

The workflow takes the same runner input as the release workflows.

Findings from go vet and staticcheck now appear as inline annotations
on the pull request diff. A new report job posts one comment with the
result of every check and the coverage. It fails when a check fails or
coverage is below the threshold. It no longer needs the bc command.

A push to a branch with an open pull request now skips its run, because
the pull_request event already runs the checks. Stale runs on the same
branch are cancelled. Every job has a timeout.

2026-10-02 01:20:26 +01:00

.github

feat(go-pr): add runner input and a single PR checks report

2026-10-02 01:20:26 +01:00

README.md

feat(go-pr): add runner input and a single PR checks report

2026-10-02 01:20:26 +01:00

README.md

Shared GitHub Actions

Reusable workflows and composite actions for Go projects.

Reusable Workflows

Runner selection

Every reusable workflow accepts runner (label, or a JSON object to pick a runner group):

with:
  runner: self-hosted
  # or
  runner: '{"group":"ci-linux","labels":["x64"]}'

Resolution order: inputs.runner, repository/org variable SHARED_ACTIONS_RUNNER, ubuntu-latest. Set the variable once to move every consumer. In go-release-cgo.yaml the build matrix keeps its per-platform os; runner covers the other jobs. Runner groups exist only for organisations and enterprises.

`go-release.yaml`

Standard Go release workflow using GoReleaser.

jobs:
  release:
    uses: lukaszraczylo/shared-actions/.github/workflows/go-release.yaml@main
    with:
      go-version: ">=1.24"
      docker-enabled: true  # optional
    secrets: inherit

Inputs:

Input	Default	Description
`go-version`	`>=1.24`	Go version
`semver-config`	`semver.yaml`	Path to semver config
`docker-enabled`	`false`	Enable Docker builds
`docker-registry`	`ghcr.io`	Docker registry
`rolling-release-tag`	`""`	Rolling release tag (e.g., `v1`)

`go-release-cgo.yaml`

Go release workflow for CGO-enabled projects. Builds natively on each platform.

jobs:
  release:
    uses: lukaszraczylo/shared-actions/.github/workflows/go-release-cgo.yaml@main
    with:
      go-version: ">=1.24"
      node-enabled: true
      node-build-script: "cd ui && npm ci && npm run build"
    secrets: inherit

Inputs:

Input	Default	Description
`go-version`	`>=1.24`	Go version
`semver-config`	`semver.yaml`	Path to semver config
`rolling-release-tag`	`""`	Rolling release tag
`node-enabled`	`false`	Enable Node.js
`node-version`	`20`	Node.js version
`node-build-script`	`""`	Frontend build script
`platforms`	(all 4)	JSON array of platforms

`go-pr.yaml`

Pull request checks: tests, linting, security scans.

go vet / staticcheck findings show as inline annotations on the PR diff; gosec and CodeQL post to code scanning.
The report job posts one sticky comment with every check's result and coverage, and fails if any check fails or coverage is below coverage-threshold. Require PR Checks Report in branch protection.
A push to a branch with an open PR skips the duplicate run; stale runs on the same branch are cancelled.
Fork PRs cannot receive the comment; the report still lands in the job summary.

jobs:
  pr-checks:
    uses: lukaszraczylo/shared-actions/.github/workflows/go-pr.yaml@main
    with:
      go-version: ">=1.24"
    secrets: inherit

`go-autoupdate.yaml`

Automatic dependency updates.

jobs:
  autoupdate:
    uses: lukaszraczylo/shared-actions/.github/workflows/go-autoupdate.yaml@main
    with:
      go-version: ">=1.24"
      release-workflow: "release.yaml"
    secrets: inherit

Composite Actions

`actions/go-test`

Run Go tests.

- uses: lukaszraczylo/shared-actions/.github/actions/go-test@main
  with:
    go-version: ">=1.24"
    cgo-enabled: "1"  # optional, default "0"

`actions/semver`

Calculate semantic version.

- id: semver
  uses: lukaszraczylo/shared-actions/.github/actions/semver@main
  with:
    config-file: semver.yaml

- run: echo "Version: ${{ steps.semver.outputs.version_tag }}"

`actions/goreleaser`

Run GoReleaser with mode support.

# Full release (single runner)
- uses: lukaszraczylo/shared-actions/.github/actions/goreleaser@main
  with:
    version-tag: v1.0.0
    mode: full
    github-token: ${{ secrets.GITHUB_TOKEN }}

# Split build (matrix)
- uses: lukaszraczylo/shared-actions/.github/actions/goreleaser@main
  with:
    version-tag: v1.0.0
    mode: split
    cgo-enabled: "1"
    github-token: ${{ secrets.GITHUB_TOKEN }}

# Merge artifacts
- uses: lukaszraczylo/shared-actions/.github/actions/goreleaser@main
  with:
    version-tag: v1.0.0
    mode: merge
    github-token: ${{ secrets.GITHUB_TOKEN }}

`actions/rolling-release`

Create/update a rolling release tag.

- uses: lukaszraczylo/shared-actions/.github/actions/rolling-release@main
  with:
    tag: v1
    version-tag: v1.2.3
    github-token: ${{ secrets.GITHUB_TOKEN }}

`actions/node-build`

Setup Node.js and run build script.

- uses: lukaszraczylo/shared-actions/.github/actions/node-build@main
  with:
    node-version: "20"
    build-script: "cd ui && npm ci && npm run build"

Outputs

Both release workflows output:

version - Calculated version without v prefix (e.g., 1.2.3)
version_tag - Version with v prefix (e.g., v1.2.3)