You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Dependabot gomod directory is set to "/" but go.mod lives in "/cli" - Dependabot will not find Go dependencies and will never submit Go module update PRs. Fix: change directory: "/" to directory: "/cli" in .github/dependabot.yml for the gomod ecosystem.
README Go version badge shows go-1.26.0 but both go.mod and all CI workflows use 1.26.1 - the badge is stale and misleading. Fix: update the badge URL to go-1.26.1.
ci.yml only triggers on pull_request and workflow_dispatch, not on push to main. Commits merged directly to main (e.g. squash/merge) are never verified by CI after landing. Fix: add a push: branches: [main] trigger to ci.yml.
The test job in ci.yml has a duplicate Set up Go step (appears at line ~86 and again at line ~124). The second invocation is redundant and could shadow the first if versions ever differ. Fix: remove the duplicate step.
repository health
directory: "/"todirectory: "/cli"in.github/dependabot.ymlfor thegomodecosystem.go-1.26.0but bothgo.modand all CI workflows use1.26.1- the badge is stale and misleading. Fix: update the badge URL togo-1.26.1.ci.ymlonly triggers onpull_requestandworkflow_dispatch, not onpushtomain. Commits merged directly to main (e.g. squash/merge) are never verified by CI after landing. Fix: add apush: branches: [main]trigger toci.yml.testjob inci.ymlhas a duplicateSet up Gostep (appears at line ~86 and again at line ~124). The second invocation is redundant and could shadow the first if versions ever differ. Fix: remove the duplicate step.Automated analysis - 4 finding(s)