Skip to content

feat: dispatch-parity quality improvements#24

Merged
jongio merged 2 commits intomainfrom
quality/dispatch-parity
Mar 16, 2026
Merged

feat: dispatch-parity quality improvements#24
jongio merged 2 commits intomainfrom
quality/dispatch-parity

Conversation

@jongio
Copy link
Owner

@jongio jongio commented Mar 15, 2026

Dispatch-Parity Quality Improvements

Brings azd-copilot CI/CD and code quality to parity with jongio/dispatch.

CI/CD & Security

  • SHA-pinned all GitHub Actions to immutable commit SHAs
  • Added CODEOWNERS with @jongio
  • Added CodeQL security scanning workflow
  • Added govulncheck vulnerability scanning workflow
  • Added Dependabot for Go modules and GitHub Actions
  • Added cosign code signing and SBOM generation to release workflow
  • Added concurrency control to CI workflows

Code Quality

  • Upgraded golangci-lint config to proper v2 format (30+ linters)
  • Migrated from v1 config format (settings were silently ignored) to proper v2 nested format
  • Added deadcode detection, gofumpt formatting, cross-GOOS linting to Magefile
  • Fixed 52 lint issues (doc comments, gosec nolints, nilerr, prealloc, misspell, unconvert)
  • Added README badges (CI, Release, Go Report Card, Go Reference)

Files Changed

29 files changed, 452 insertions(+), 84 deletions(-)

Replace "seamlessly" and "Leverage" with concrete language
in shipped skill markdown files.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jongio jongio force-pushed the quality/dispatch-parity branch from 178e476 to c7951ce Compare March 15, 2026 13:45
@github-actions
Copy link
Contributor

github-actions bot commented Mar 15, 2026

🚀 Website Preview

Your PR preview is ready!

📎 Preview URL: https://jongio.github.io/azd-copilot/pr/24/

This preview will be automatically cleaned up when the PR is closed.

github-actions bot added a commit that referenced this pull request Mar 15, 2026
@github-advanced-security
Copy link

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@jongio jongio force-pushed the quality/dispatch-parity branch from c7951ce to e3cba64 Compare March 15, 2026 20:16
github-actions bot added a commit that referenced this pull request Mar 15, 2026
- Pin all GitHub Actions to full commit SHAs
- Add CODEOWNERS file
- Add Dependabot for go modules and github-actions
- Add concurrency control to CI/PR workflows
- Add CodeQL security scanning workflow
- Add govulncheck vulnerability scanning workflow
- Standardize golangci-lint config with 30+ linters
- Add dispatch-level linters (errname, exhaustive, forcetypeassert, etc.)
- Add gofumpt strict formatting checks
- Add deadcode detection
- Add cosign code signing to release workflow
- Add SBOM generation (SPDX + CycloneDX) to release workflow
- Add comprehensive README badges (CI, CodeQL, Go Report Card, etc.)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jongio jongio force-pushed the quality/dispatch-parity branch from e3cba64 to 1b6418c Compare March 15, 2026 20:23
github-actions bot added a commit that referenced this pull request Mar 15, 2026
@jongio jongio merged commit 4508c76 into main Mar 16, 2026
7 of 11 checks passed
@jongio jongio deleted the quality/dispatch-parity branch March 16, 2026 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant