Skip to content

build: use shared common.mk from go-build-tools - #102

Merged
KARTIKrocks merged 4 commits into
mainfrom
build/shared-common-mk
Oct 13, 2026
Merged

KARTIKrocks merged 4 commits into
mainfrom
build/shared-common-mk

Conversation

@KARTIKrocks

@KARTIKrocks KARTIKrocks commented Oct 13, 2026 •

Copy link
Copy Markdown
Owner

User description

Replace the per-repo pins for golangci-lint, goimports and govulncheck, and the setup / print-*-version targets, with the shared common.mk synced from KARTIKrocks/go-build-tools. Add the common-mk drift check to CI so the synced file cannot be edited by hand.

Summary

What does this PR change, and why?

Closes #

Type of change

  • Bug fix
  • New detection rule
  • New integration / parser
  • Feature / enhancement
  • Docs only
  • Refactor / chore

Checklist

  • make ci passes (fmt-check, vet, lint, vuln, test-race, lint-docs) across all modules
  • Added/updated tests (and, where practical, a failure-mode check)
  • Updated docs under website/docs/ with a version marker for anything new (_0.3+_, _Added in 0.3._, // 0.3+) — never website/versioned_docs/
  • Updated AGENTS.md / .sqlguard.example.yml if a convention or config key changed
  • Added an entry under ## [Unreleased] in CHANGELOG.md
  • No new third-party deps in analyzer / middleware / reporter
  • Findings stay redaction-safe (no raw literals leak into a Result)

Notes for reviewers

Anything reviewers should focus on — tricky areas, trade-offs, follow-ups.


CodeAnt-AI Description

Use shared Go build tools and check their configuration stays in sync

What Changed

  • Go development tool setup and versions now come from shared build configuration instead of repository-specific settings
  • CI checks that the shared configuration has not drifted from its source

Impact

✅ Consistent Go tool versions across repositories
✅ CI catches edits that make shared build configuration drift

💡 Usage Guide

Checking Your Pull Request

Every time you make a pull request, our system automatically looks through it. We check for security issues, mistakes in how you're setting up your infrastructure, and common code problems. We do this to make sure your changes are solid and won't cause any trouble later.

Talking to CodeAnt AI

Got a question or need a hand with something in your pull request? You can easily get in touch with CodeAnt AI right here. Just type the following in a comment on your pull request, and replace "Your question here" with whatever you want to ask:

@codeant-ai ask: Your question here

This lets you have a chat with CodeAnt AI about your pull request, making it easier to understand and improve your code.

Example

@codeant-ai ask: Can you suggest a safer alternative to storing this secret?

Preserve Org Learnings with CodeAnt

You can record team preferences so CodeAnt AI applies them in future reviews. Reply directly to the specific CodeAnt AI suggestion (in the same thread) and replace "Your feedback here" with your input:

@codeant-ai: Your feedback here

This helps CodeAnt AI learn and adapt to your team's coding style and standards.

Example

@codeant-ai: Do not flag unused imports.

Retrigger review

Ask CodeAnt AI to review the PR again, by typing:

@codeant-ai: review

Check Your Repository Health

To analyze the health of your code repository, visit our dashboard at https://app.codeant.ai. This tool helps you identify potential issues and areas for improvement in your codebase, ensuring your repository maintains high standards of code health.

Replace the per-repo pins for golangci-lint, goimports and govulncheck, and the
setup / print-*-version targets, with the shared common.mk synced from
KARTIKrocks/go-build-tools. Add the common-mk drift check to CI so the synced
file cannot be edited by hand.
@codeant-ai

codeant-ai Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

🤖 CodeAnt AI — Review Status

Status Commit Started (UTC) Finished (UTC)
✅ Incremental review completed d0905a4 Oct 13, 2026 · 10:24 10:27
✅ Reviewed your PR 84cc362 Oct 13, 2026 · 08:04 08:07

@codeant-ai

codeant-ai Bot commented Oct 13, 2026

Copy link
Copy Markdown

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

@coderabbitai

coderabbitai Bot commented Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration
  • Configuration used: Repository: KARTIKrocks/sqlguard/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 15a7bb27-f830-4468-99c6-3d61f819b877
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@codeant-ai

codeant-ai Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit: ecd6c637
Scan Time: 2026-10-13 10:36:29 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate Status Details
Secrets ✅ PASSED 0 secrets found
SAST ✅ PASSED No security issues
SCA (Dependencies) ✅ PASSED Rating S: No vulnerabilities

View Full Results

@codeant-ai codeant-ai Bot added the size:XS This PR changes 0-9 lines, ignoring generated files label Oct 13, 2026
Comment thread .github/workflows/ci.yml Outdated
@codeant-ai

codeant-ai Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

CodeAnt PR Risk: Low Risk

  • The PR appears safe to merge; the Makefile uses shared Go tooling configuration and CI checks that configuration.
  • The reusable CI workflow is pinned to a commit SHA, addressing the concern about a mutable upstream reference.

Assessed commit: d0905a47adaf

@main is mutable, so a change in go-build-tools could alter this CI check without any reviewed change here. Pin to a full commit SHA.
govulncheck also scans the standard library of the Go in use. A cached older patch release fails on stdlib advisories already fixed upstream, so resolve the newest patch release.
@KARTIKrocks
KARTIKrocks merged commit e42711c into main Oct 13, 2026
32 checks passed
@KARTIKrocks
KARTIKrocks deleted the build/shared-common-mk branch October 13, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS This PR changes 0-9 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant