Repository navigation

Verify attested TLS SPKI fingerprint on every upstream response, not just cache misses #662

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: write
	pull-requests: write
	actions: write

	jobs:
	check:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-go@v5
	with:
	go-version: "1.26"

	- name: Install golangci-lint
	uses: golangci/golangci-lint-action@v9
	with:
	args: --help

	- name: Run lint (gofmt + go vet + golangci-lint)
	run: make lint

	- name: Run tests with coverage
	run: make coverage

	- name: Run octocov
	uses: k1LoW/octocov-action@v1

	- name: Push coverage badge
	if: github.ref == 'refs/heads/main'
	run: \|
	BADGE_DIR=$(mktemp -d)
	cp docs/coverage.svg "$BADGE_DIR/"
	cd "$BADGE_DIR"
	git init -b badges
	git config user.name "github-actions[bot]"
	git config user.email "github-actions[bot]@users.noreply.github.com"
	git add coverage.svg
	git commit -m "Update coverage badge"
	git remote add origin "https://x-access-token:${{ github.token }}@github.com/${{ github.repository }}.git"
	git push -f origin badges