The Agent Skills Directory

[SAFE]: The skill provides static templates and configuration guides for GitHub Actions and Makefiles, which are standard for Go development workflows.
[SAFE]: The GitHub Actions workflows utilize official and well-known actions from trusted sources (actions/checkout, actions/setup-go, and golangci-lint).
[SAFE]: The skill recommends setting permissions: contents: read at the workflow level, adhering to the principle of least privilege for CI jobs.
[SAFE]: It incorporates proactive security tooling, specifically recommending gosec for static security analysis and govulncheck for identifying known vulnerabilities in dependencies.
[SAFE]: The coverage gate script uses standard UNIX tools (awk) for simple numeric evaluation of test results, presenting no significant security risk.

go-ci