Skip to content

[Sync] Update project files from source repository (9def984)#84

Merged
mrz1836 merged 1 commit into
masterfrom
chore/sync-files-bsv-blockchain-sdks-20260309-115618-9def984
Mar 9, 2026
Merged

[Sync] Update project files from source repository (9def984)#84
mrz1836 merged 1 commit into
masterfrom
chore/sync-files-bsv-blockchain-sdks-20260309-115618-9def984

Conversation

@mrz1836
Copy link
Copy Markdown
Collaborator

@mrz1836 mrz1836 commented Mar 9, 2026

What Changed

  • Added new github-token input parameter to setup-go-with-cache action with description "GitHub token for private module authentication (only used when GOPRIVATE is set in environment)"
  • Added conditional step "🔐 Configure private module authentication" that runs when both github-token input is provided and GOPRIVATE environment variable is set
  • The authentication step configures git to use token-based HTTPS authentication for GitHub URLs and sets GONOSUMDB to match GOPRIVATE if not already set
  • Refactored parse-env action to pass inputs.env-json through an ENV_JSON environment variable instead of direct parameter substitution

Why It Was Necessary

  • Enable support for private Go modules in CI workflows that require authentication to GitHub repositories
  • Provide a secure way to authenticate Go module downloads when GOPRIVATE is configured without requiring manual git configuration in each workflow
  • Improve security and maintainability by conditionally applying authentication only when needed (both token and GOPRIVATE are present)

Testing Performed

  • Verify the action accepts the new github-token input parameter with default empty string
  • Confirm authentication step is skipped when either github-token is empty or GOPRIVATE is not set
  • Test that git configuration is properly set when both conditions are met and private modules can be fetched

Impact / Risk

  • Low Risk: The change is purely additive - existing workflows continue to work unchanged without providing the token
  • No Breaking Changes: Default behavior remains identical; authentication is opt-in via the new input parameter
  • Security Improvement: Tokens are passed through environment variables and properly scoped to only run when private modules are configured

@mrz1836 mrz1836 self-assigned this Mar 9, 2026
@mrz1836 mrz1836 added automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps labels Mar 9, 2026
@github-actions github-actions Bot added update General updates size/M Medium change (51–200 lines) labels Mar 9, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Mar 9, 2026

@mrz1836 mrz1836 merged commit 2f8fe8c into master Mar 9, 2026
44 checks passed
@github-actions github-actions Bot deleted the chore/sync-files-bsv-blockchain-sdks-20260309-115618-9def984 branch March 9, 2026 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated-sync Automated sync PR, e.g. from a fork or external repo automerge Label to automatically merge pull requests that meet all required conditions chore Simple dependency updates or version bumps size/M Medium change (51–200 lines) update General updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant