Development
Prerequisites
- Go 1.25+
- Docker
- Helm 3
Build & test
CI also runs golangci-lint, govulncheck (SARIF → code scanning), and Trivy
image scans (HIGH/CRITICAL, ignore unfixed) on every PR.
Documentation site
Docs are built with Rspress from this docs/ tree and
published to GitHub Pages on pushes to main.
Run locally
Integration tests
Integration tests under test/integration exercise the reporter lifecycle
against fakes (SQLite cache, registry, GitHub API). They run with the rest of
the suite:
Container image
Dependency updates
Renovate is configured via
renovate.json.
It opens chore(deps): PRs labeled dependencies, with automerge for safe
non-major updates (Go modules, Actions, Docker digests).
Releasing
See releasing.md. Preview changelog with: