Skip to content

Conversation

@bonzofenix
Copy link
Contributor

@bonzofenix bonzofenix commented Nov 21, 2025

Port the following worflows from https://github.com/cloudfoundry/app-autoscaler-release

  • Added CodeQL static analysis workflow for Go and Java security scanning
  • Java code style CI workflow using Google Java Format and Checkstyle with PR commenting
  • Created dependency updates post-processing workflow to automate go mod tidy
  • Updated Maven Checkstyle plugin to use correct relative paths

 • Introduce a new GitHub Actions workflow for post-processing dependency updates.
 • Trigger workflow on pull requests affecting specific paths and on manual dispatch.
 • Configure git with the author details of the last commit.
 • Utilize devbox-install-action for setting up the development environment.
 • Implement steps to tidy Go modules and update package specifications.
 • Ensure no redundant workflow runs by checking the last commit message.
 • Handle submodule deinitialization and cleanup for branch switching.
 • Add conditional logic to commit and push changes if necessary files are modified.
@github-advanced-security
Copy link
Contributor

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

 - Modify dependency update workflow triggers to include root and all subdirectory go.mod and go.sum files
 - Add `update-uaac-nix-package` target to Makefile for updating the UAAC Nix package
@bonzofenix bonzofenix self-assigned this Nov 24, 2025
bonzofenix and others added 5 commits November 24, 2025 11:04
 - Modify CodeQL analysis workflow to only include 'go' and 'java' languages, removing 'ruby'.
 - Add a new Go program for formatting checkstyle results, capable of parsing XML and outputti
 formatted error messages.
p
removes src/autoscaler submodule references ported from
app-autoscaler-release workflow
@bonzofenix bonzofenix force-pushed the add-missing-workflows branch from eacc8ea to 7616172 Compare November 24, 2025 12:09
…ub actions linting

 • Remove lint target from Makefile and replace with lint-go, lint-actions, and lint-markdown for modular linting
 • Add lint-markdown target to lint markdown files using markdownlint-cli2
 • Add lint-actions target to lint GitHub actions with actionlint
 • Introduce gorouterproxy.lint target for linting gorouterproxy
 • Implement validate-openapi-specs target to lint OpenAPI specifications
 • Update GO_VERSION extraction command for consistency in acceptance Makefile
 • Replace panic with fmt.Errorf for better error handling
 • Rename Error struct to CheckstyleErr
 • Change main function to run and handle errors gracefully
…sult processing

 - Correct the trap command to ensure proper removal of the result log file on exit
 - Streamline the Checkstyle output handling by directly writing to the log file
 - Optimize the way files needing correction are determined by using grep directly on the log file
@bonzofenix bonzofenix enabled auto-merge (squash) December 3, 2025 16:40
@bonzofenix bonzofenix force-pushed the add-missing-workflows branch from 7225f48 to 297e53f Compare December 3, 2025 16:41
@silvestre silvestre disabled auto-merge December 8, 2025 13:56
@sonarqubecloud
Copy link

sonarqubecloud bot commented Dec 8, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants