Skip to content

PCD-2818: SOC2 lint file#16

Open
hsri-pf9 wants to merge 7 commits intopf9-oidcfrom
private/soc2
Open

PCD-2818: SOC2 lint file#16
hsri-pf9 wants to merge 7 commits intopf9-oidcfrom
private/soc2

Conversation

@hsri-pf9
Copy link
Collaborator

No description provided.

@bito-code-review
Copy link

Bito Automatic Review Skipped - Draft PR

Bito didn't auto-review because this pull request is in draft status.
No action is needed if you didn't intend for the agent to review it. Otherwise, to manually trigger a review, type /review in a comment and save.
You can change draft PR review settings here, or contact your Bito workspace admin at ben@platform9.com.

@hsri-pf9 hsri-pf9 changed the title Draft PR for SOC2 audit SOC2 lint file Jan 1, 2026
@hsri-pf9 hsri-pf9 changed the title SOC2 lint file PCD-2818: SOC2 lint file Jan 3, 2026
@hsri-pf9 hsri-pf9 marked this pull request as ready for review January 3, 2026 15:51
Copy link

@windsurf-bot windsurf-bot bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 To request another review, post a new comment with "/windsurf-review".

Comment on lines +14 to +19
go-version: '1.21'
steps:
- name: Checkout Code
uses: actions/checkout@v3
- name: Export Go Version
run: echo "go-version=1.21" >> $GITHUB_OUTPUT
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Go version is hardcoded both in the outputs section (line 14) and in the Export Go Version step (line 19). This could lead to inconsistencies if one is updated but not the other. Consider defining the version once as an environment variable at the workflow level and referencing it in both places.

Comment on lines +21 to +24
golangci-lint-and-pr:
name: GolangCI Lint & Auto PR
needs: setup
runs-on: ubuntu-latest
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider adding a timeout for the golangci-lint-and-pr job to prevent it from running indefinitely in case of issues. You can add a timeout-minutes parameter at the job level.

Comment on lines +54 to +56
golangci-lint run ./... --out-format=json > tmp/golangci_output.json || true
echo -e "\nHuman-readable GolangCI output:\n"
golangci-lint run ./... || true
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The golangci-lint command is run without specifying a configuration file. For SOC2 compliance purposes, consider adding a .golangci.yml configuration file and referencing it with the --config flag to ensure consistent and documented linting rules.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant