Dev

[tuxerrante]

What type of PR is this? (check all applicable)

• Refactor
• Feature
• Bug Fix
• Optimization
• Documentation Update

Description

• Fixed Codecov plugin issues
• Git auto CRLF set to false git config --global core.autocrlf false
• Signed commits: git config commit.gpgsign true
• golang:1.22 as builder containerfile image
• Refresh container image every Sunday night
• The k8s service resource is now settable from the values.yaml
• Added repository Security policy
• Added OpenSSF scorecard workflow
• Bump actions/checkout to 4.1.1
• Bump actions/upload-artifact to 4.3.1
• Bump github/codeql-action/upload-sarif to v3
• Introduced Fuzz testing for profile filenames
• Bash CI to automate go version bump from one source of truth (config/config)

Related Tickets & Documents

• Related Issue
  Fuzz testing #25
  Create scorecard.yml #28
  Create SECURITY.md #27

Added/updated tests?

• Yes
• No, and this is why: please replace this line with details on why tests
  have not been included
• I need help with writing tests

[optional] Are there any post deployment tasks we need to perform?

Manual testing

[codecov]

Codecov Report

Attention: 44 lines in your changes are missing coverage. Please review.

Comparison is base (f6076e1) 17.1% compared to head (5be5809) 50.1%.

Files	Patch %	Lines
go/src/app/filesystemOperations.go	50.8%	14 Missing and 14 partials ⚠️
go/src/app/main.go	70.5%	5 Missing and 5 partials ⚠️
go/src/app/t_helpers.go	64.7%	3 Missing and 3 partials ⚠️

Additional details and impacted files

@@           Coverage Diff            @@
##            main     #29      +/-   ##
========================================
+ Coverage   17.1%   50.1%   +32.9%     
========================================
  Files          3       3              
  Lines        407     389      -18     
========================================
+ Hits          70     195     +125     
+ Misses       322     142     -180     
- Partials      15      52      +37     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.