build & ci improvements

*  Dockerfile: Rewrote the Dockerfile to use a multi-stage build. The builder stage uses golang:1.24-alpine to compile the binary, and the runtime stage uses alpine:latest, significantly reducing the final image size and improving security.
* Makefile: Added all common targets to .PHONY to prevent conflicts with local files/directories.
* GitHub Actions: Integrated golangci-lint-action into the CI workflow to enforce code quality and best practice automatically on every push.

Author: sha1n

.github/workflows/go.yml

@@ -17,8 +17,13 @@ jobs:
         with:
           go-version: 1.24
 
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v6
+        with:
+          version: latest
+
       - name: Build
-        run: make lint build
+        run: make build
 
       - name: Test
         run: |

Dockerfile

@@ -1,7 +1,23 @@
-FROM golang:1.24
+# Stage 1: Build
+FROM golang:1.24-alpine AS builder
 
-ADD . /bert
+# Install make and git (required for Makefile and versioning)
+RUN apk add --no-cache make git
 
 WORKDIR /bert
+COPY . .
 
+# Build the linux amd64 binary
 RUN make go-build-linux-amd64
+
+# Stage 2: Runtime
+FROM alpine:latest
+
+RUN apk add --no-cache ca-certificates
+
+WORKDIR /bert
+COPY --from=builder /bert/bin/bert-linux-amd64 /bert/bin/bert-linux-amd64
+COPY --from=builder /bert/test /bert/test
+
+# Set the binary as the entrypoint
+ENTRYPOINT ["/bert/bin/bert-linux-amd64"]

Makefile

@@ -36,12 +36,16 @@ PID := $(GOBUILD)/.$(PROJECTNAME).pid
 # Make is verbose in Linux. Make it silent.
 MAKEFLAGS += --silent
 
+.PHONY: default
 default: install lint format test build
 
+.PHONY: install
 install: go-get
 
+.PHONY: format
 format: go-format
 
+.PHONY: lint
 lint: go-lint
 
 .PHONY: build
@@ -56,84 +60,105 @@ build:
 	bin/bert-$(GOHOSTOS)-$(GOHOSTARCH) completion bash > $(GOBUILD)/completions/bert.bash
 	bin/bert-$(GOHOSTOS)-$(GOHOSTARCH) completion fish > $(GOBUILD)/completions/bert.fish
 
-	#@cat $(STDERR) | sed -e '1s/.*/\nError:\n/'  | sed 's/make\[.*/ /' | sed "/^/s/^/     /" 1>&2
+	#@cat $(STDERR) | sed -e '1s/.*/\nError:\n/'  | sed 's/make\[.*\]/ /' | sed "/^/s/^/     /" 1>&2
 
 
+.PHONY: test
 test: install go-test
 
+.PHONY: clean
 clean:
 	@-rm $(GOBIN)/$(PROGRAMNAME)* 2> /dev/null
 	@-$(MAKE) go-clean
 
+.PHONY: go-lint
 go-lint:
 	@echo "  >  Linting source files..."
 	go vet $(MODFLAGS) -c=10 `go list $(MODFLAGS) ./...`
 
+.PHONY: go-format
 go-format:
 	@echo "  >  Formating source files..."
 	gofmt -s -w $(GOFILES)
 
+.PHONY: go-build-current
 go-build-current:
 	@echo "  >  Building $(GOHOSTOS)/$(GOHOSTARCH) binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOHOSTOS) GOARCH=$(GOHOSTARCH) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME) $(GOBASE)/cmd
 
+.PHONY: go-build
 go-build: go-get go-build-linux-amd64 go-build-linux-arm64 go-build-linux-arm go-build-darwin-amd64 go-build-darwin-arm64 go-build-windows-amd64 go-build-windows-arm
 
+.PHONY: go-test
 go-test:
 	@echo "  >  Running Go tests..."
 	go test $(MODFLAGS) -covermode=count `go list $(MODFLAGS) ./...`
 
+.PHONY: go-build-linux-amd64
 go-build-linux-amd64:
 	@echo "  >  Building linux amd64 binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOOS_LINUX) GOARCH=$(GOARCH_AMD64) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME)-$(GOOS_LINUX)-$(GOARCH_AMD64) $(GOBASE)/cmd
 
+.PHONY: go-build-linux-arm64
 go-build-linux-arm64:
 	@echo "  >  Building linux arm64 binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOOS_LINUX) GOARCH=$(GOARCH_ARM64) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME)-$(GOOS_LINUX)-$(GOARCH_ARM64) $(GOBASE)/cmd
 
+.PHONY: go-build-linux-arm
 go-build-linux-arm:
 	@echo "  >  Building linux arm binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOOS_LINUX) GOARCH=$(GOARCH_ARM) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME)-$(GOOS_LINUX)-$(GOARCH_ARM) $(GOBASE)/cmd
 
+.PHONY: go-build-darwin-amd64
 go-build-darwin-amd64:
 	@echo "  >  Building darwin amd64 binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOOS_DARWIN) GOARCH=$(GOARCH_AMD64) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME)-$(GOOS_DARWIN)-$(GOARCH_AMD64) $(GOBASE)/cmd
 
+.PHONY: go-build-darwin-arm64
 go-build-darwin-arm64:
 	@echo "  >  Building darwin arm64 binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOOS_DARWIN) GOARCH=$(GOARCH_ARM64) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME)-$(GOOS_DARWIN)-$(GOARCH_ARM64) $(GOBASE)/cmd
 
+.PHONY: go-build-windows-amd64
 go-build-windows-amd64:
 	@echo "  >  Building windows amd64 binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOOS_WINDOWS) GOARCH=$(GOARCH_AMD64) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME)-$(GOOS_WINDOWS)-$(GOARCH_AMD64).exe $(GOBASE)/cmd
 
+.PHONY: go-build-windows-arm
 go-build-windows-arm:
 	@echo "  >  Building windows arm binaries..."
 	@GOPATH=$(GOPATH) GOOS=$(GOOS_WINDOWS) GOARCH=$(GOARCH_ARM) GOBIN=$(GOBIN) go build $(MODFLAGS) $(LDFLAGS) -o $(GOBIN)/$(PROGRAMNAME)-$(GOOS_WINDOWS)-$(GOARCH_ARM).exe $(GOBASE)/cmd
 
+.PHONY: go-generate
 go-generate:
 	@echo "  >  Generating dependency files..."
 	@GOPATH=$(GOPATH) GOBIN=$(GOBIN) go generate $(generate)
 
+.PHONY: go-get
 go-get:
 	@echo "  >  Checking if there is any missing dependencies..."
 	@GOPATH=$(GOPATH) GOBIN=$(GOBIN) go mod tidy
 
+.PHONY: go-install
 go-install:
 	@GOPATH=$(GOPATH) GOBIN=$(GOBIN) go install $(GOFILES)
 
+.PHONY: go-clean
 go-clean:
 	@echo "  >  Cleaning build cache"
 	@GOPATH=$(GOPATH) GOBIN=$(GOBIN) go clean $(MODFLAGS) $(GOBASE)/cmd
 	@GOPATH=$(GOPATH) GOBIN=$(GOBIN) go clean -modcache
 
+.PHONY: run-sanity-tests
 run-sanity-tests: build-docker run-linux-dockerized-tests
 
+.PHONY: build-docker
 build-docker:
 	@echo "  >  Building docker image..."
 	docker build -t sha1n/$(PROJECTNAME):latest .
 	docker tag sha1n/$(PROJECTNAME):latest sha1n/$(PROJECTNAME):$(VERSION:v%=%)
 
+.PHONY: run-linux-dockerized-tests
 run-linux-dockerized-tests:
 	@echo "  >  Running with experimental UI..."
 	docker run --rm -ti sha1n/bert /bert/bin/bert-linux-amd64 -c /bert/test/data/spec_test_load.yaml
@@ -148,6 +173,7 @@ run-linux-dockerized-tests:
 	@echo "  >  Running with ad-hoc commands..."
 	docker run --rm -ti sha1n/bert /bert/bin/bert-linux-amd64 'ls' 'ls -laH' --executions 10
 
+.PHONY: release
 release:
 ifdef GITHUB_TOKEN
 	@echo "  >  Releasing..."
@@ -156,11 +182,13 @@ else
 	$(error GITHUB_TOKEN is not set)
 endif
 
-.PHONY: help
+.PHONY: all
 all: help
+
+.PHONY: help
 help: Makefile
 	@echo
 	@echo " Choose a command run in "$(PROJECTNAME)":"
 	@echo
 	@sed -n 's/^##//p' $< | column -t -s ':' |  sed -e 's/^/ /'
-	@echo
+	@echo