Skip to content

Conversation

@cmurphy
Copy link
Contributor

@cmurphy cmurphy commented Nov 22, 2025

Make each helper command its own module to avoid maintaining every tool's dependencies in a single go.mod.

Also remove update-deps.sh and update-codegen.sh which weren't used anywhere.

Summary

Release Note

Documentation

@cmurphy cmurphy requested review from bobcallaway and jku November 22, 2025 00:36
@cmurphy cmurphy requested a review from a team as a code owner November 22, 2025 00:36
@cmurphy cmurphy force-pushed the gowork branch 3 times, most recently from 07db89f to 0352963 Compare November 22, 2025 01:05
@cmurphy cmurphy marked this pull request as draft November 22, 2025 02:13
@cmurphy
Copy link
Contributor Author

cmurphy commented Nov 22, 2025

Debugging error resolving image references: cache.get("~/ko/bin/github.com/sigstore/scaffolding/tools/trillian/cmd/trillian/updatetree/linux/amd64/out")

@cmurphy cmurphy force-pushed the gowork branch 2 times, most recently from 8999a11 to b5dc4dd Compare November 24, 2025 22:50
@cmurphy cmurphy marked this pull request as ready for review November 24, 2025 23:10
loosebazooka
loosebazooka previously approved these changes Nov 26, 2025
@loosebazooka
Copy link
Member

curious if bob's change affects this in any way too: #1820

@bobcallaway
Copy link
Member

curious if bob's change affects this in any way too: #1820

we could just set up rules for each app if we don't want them all grouped together for some reason.

- uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
with:
go-version-file: 'go.mod'
go-version: stable
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think you could use go.work here and achieve the same effect as before.

outputs:
modules: ${{ steps.set-modules.outputs.modules }}
steps:
- uses: actions/checkout@v5
Copy link
Member

@bobcallaway bobcallaway Nov 26, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- uses: actions/checkout@v5
- uses: actions/checkout@v5
with:
persist-credentials: false

Comment on lines 50 to 51
- uses: actions/checkout@v5
- uses: actions/setup-go@v6
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please pin the actions to a commit SHA

Make each helper command its own module to avoid maintaining every
tool's dependencies in a single go.mod.

Also remove update-deps.sh and update-codegen.sh which weren't used
anywhere.

Signed-off-by: Colleen Murphy <[email protected]>
@@ -0,0 +1,181 @@
module github.com/sigstore/scaffolding/hack

go 1.25.0
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should/can we take all these go versions out and just depend on the one defined in go.work? It's not clear to me what best practice is.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we can do that? I didn't come across a syntax for that while I was looking at examples. And this way the module doesn't have to know that it's a submodule, it can be totally independent.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants