Run go-makefile-maker

.envrc

@@ -3,6 +3,8 @@
 # SPDX-License-Identifier: Apache-2.0
 if type -P lorri &>/dev/null; then
   eval "$(lorri direnv)"
-else
+elif type -P nix &>/dev/null; then
   use nix
+else
+  echo "Found no nix binary. Skipping activating nix-shell..."
 fi

.github/workflows/checks.yaml

@@ -29,7 +29,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.4
+          go-version: 1.23.5
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:

.github/workflows/ci.yaml

@@ -32,7 +32,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.4
+          go-version: 1.23.5
       - name: Build all binaries
         run: make build-all
   test:
@@ -47,6 +47,6 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.4
+          go-version: 1.23.5
       - name: Run tests and generate coverage report
         run: make build/cover.out

.github/workflows/codeql.yaml

@@ -32,7 +32,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           check-latest: true
-          go-version: 1.23.4
+          go-version: 1.23.5
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:

.license-scan-overrides.jsonl

@@ -1,6 +1,7 @@
 {"name": "github.com/chzyer/logex", "licenceType": "MIT"}
 {"name": "github.com/hashicorp/vault/api/auth/approle", "licenceType": "MPL-2.0"}
 {"name": "github.com/jpillora/longestcommon", "licenceType": "MIT"}
+{"name": "github.com/miekg/dns", "licenceType": "BSD-3-Clause"}
 {"name": "github.com/spdx/tools-golang", "licenceTextOverrideFile": "vendor/github.com/spdx/tools-golang/LICENSE.code"}
 {"name": "github.com/xeipuuv/gojsonpointer", "licenceType": "Apache-2.0"}
 {"name": "github.com/xeipuuv/gojsonreference", "licenceType": "Apache-2.0"}

.license-scan-rules.json

@@ -2,10 +2,12 @@
   "allowlist": [
     "Apache-2.0",
     "BSD-2-Clause",
+    "BSD-2-Clause-FreeBSD",
     "BSD-3-Clause",
     "ISC",
     "MIT",
     "MPL-2.0",
-    "Unlicense"
+    "Unlicense",
+    "Zlib"
   ]
 }

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.23.4-alpine3.21 AS builder
+FROM golang:1.23.5-alpine3.21 AS builder
 
 RUN apk add --no-cache --no-progress ca-certificates gcc git make musl-dev
 
@@ -16,7 +16,7 @@ RUN addgroup -g 4200 appgroup \
 # upgrade all installed packages to fix potential CVEs in advance
 # also remove apk package manager to hopefully remove dependency on OpenSSL 🤞
 RUN apk upgrade --no-cache --no-progress \
-  && apk del --no-cache --no-progress apk-tools alpine-keys
+  && apk del --no-cache --no-progress apk-tools alpine-keys alpine-release libc-utils
 
 COPY --from=builder /etc/ssl/certs/ /etc/ssl/certs/
 COPY --from=builder /etc/ssl/cert.pem /etc/ssl/cert.pem

Makefile

@@ -109,6 +109,10 @@ check-dependency-licenses: FORCE install-go-licence-detector
 	@printf "\e[1;36m>> go-licence-detector\e[0m\n"
 	@go list -m -mod=readonly -json all | go-licence-detector -includeIndirect -rules .license-scan-rules.json -overrides .license-scan-overrides.jsonl
 
+goimports: FORCE
+	@printf "\e[1;36m>> goimports -w -local https://github.com/sapcc/argora\e[0m\n"
+	@goimports -w -local github.com/sapcc/tf-registry $(patsubst $(shell awk '$$1 == "module" {print $$2}' go.mod)%,.%/*.go,$(shell go list ./...))
+
 clean: FORCE
 	git clean -dxf build
 
@@ -157,6 +161,7 @@ help: FORCE
 	@printf "  \e[36mlicense-headers\e[0m              Add license headers to all non-vendored source code files.\n"
 	@printf "  \e[36mcheck-license-headers\e[0m        Check license headers in all non-vendored .go files.\n"
 	@printf "  \e[36mcheck-dependency-licenses\e[0m    Check all dependency licenses using go-licence-detector.\n"
+	@printf "  \e[36mgoimports\e[0m                    Run goimports on all non-vendored .go files\n"
 	@printf "  \e[36mclean\e[0m                        Run git clean.\n"
 
 .PHONY: FORCE