Claude
2336b98a36
Rework caps.sh to detect new capabilities rather than requiring an exact match, so the baseline works across Go versions. Add a forbidden capabilities list (UNSAFE_POINTER, NETWORK, CGO, EXEC) that will always fail the check. Use Go 1.26 and capslock@latest in CI. https://claude.ai/code/session_01HwDXpKevFLhE5EfrR6JrBn
26 lines
525 B
YAML
26 lines
525 B
YAML
name: capabilities
|
|
on:
|
|
push:
|
|
branches:
|
|
- v2
|
|
pull_request:
|
|
branches:
|
|
- v2
|
|
|
|
jobs:
|
|
check:
|
|
name: check capabilities
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Setup go
|
|
uses: actions/setup-go@v6
|
|
with:
|
|
go-version: "1.26"
|
|
- name: Install capslock
|
|
run: go install github.com/google/capslock/cmd/capslock@latest
|
|
- name: Check for new capabilities
|
|
run: ./caps.sh check
|