From 4b1e50886ce7d9e2319a02fb9b6ad1b77df9f806 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:17:03 -0700 Subject: [PATCH 01/10] Add OpenSSF Scorecard badge to README --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index d635a72b..0d035f2d 100644 --- a/README.md +++ b/README.md @@ -7,6 +7,7 @@ ![test](https://github.com/katbyte/terrafmt/actions/workflows/pr-tests.yaml/badge.svg) ![lint](https://github.com/katbyte/terrafmt/actions/workflows/pr-golangci-lint.yaml/badge.svg) ![CodeQL](https://github.com/katbyte/terrafmt/actions/workflows/codeql-analysis.yml/badge.svg) +[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/katbyte/terrafmt/badge)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt) A tool for extracting and formatting [Terraform](https://www.terraform.io/docs/) configuration embedded in other files, primarily intended to help with [provider](https://www.terraform.io/docs/providers/index.html) development. From 9cfa4006815a6da7e022e8dbafd1f5a7afc2ce10 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:17:38 -0700 Subject: [PATCH 02/10] Rename GolangCI Lint workflow to GolangCI --- .github/workflows/pr-golangci-lint.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr-golangci-lint.yaml b/.github/workflows/pr-golangci-lint.yaml index c96efd59..15f93bd7 100644 --- a/.github/workflows/pr-golangci-lint.yaml +++ b/.github/workflows/pr-golangci-lint.yaml @@ -1,5 +1,5 @@ --- -name: GolangCI Lint +name: GolangCI on: push: branches: [ 'main' ] From c3d31963a1b24bc0b64fada12a024e13cbb65ff4 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:18:19 -0700 Subject: [PATCH 03/10] Shorten Scorecard badge label to openssf --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 0d035f2d..d6589636 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ ![test](https://github.com/katbyte/terrafmt/actions/workflows/pr-tests.yaml/badge.svg) ![lint](https://github.com/katbyte/terrafmt/actions/workflows/pr-golangci-lint.yaml/badge.svg) ![CodeQL](https://github.com/katbyte/terrafmt/actions/workflows/codeql-analysis.yml/badge.svg) -[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/katbyte/terrafmt/badge)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt) +[![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/katbyte/terrafmt?label=openssf)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt) A tool for extracting and formatting [Terraform](https://www.terraform.io/docs/) configuration embedded in other files, primarily intended to help with [provider](https://www.terraform.io/docs/providers/index.html) development. From 2bf229ac46c9d980cccc69dd7dc5e145a21fe213 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:18:31 -0700 Subject: [PATCH 04/10] Lowercase the go version badge label --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d6589636..fa801f74 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # terrafmt [![GitHub release](https://img.shields.io/github/v/release/katbyte/terrafmt?color=blueviolet)](https://github.com/katbyte/terrafmt/releases/latest) -[![Go Version](https://img.shields.io/github/go-mod/go-version/katbyte/terrafmt?color=00ADD8)](https://github.com/katbyte/terrafmt/blob/main/go.mod) +[![Go Version](https://img.shields.io/github/go-mod/go-version/katbyte/terrafmt?label=go&color=00ADD8)](https://github.com/katbyte/terrafmt/blob/main/go.mod) [![License](https://img.shields.io/github/license/katbyte/terrafmt?color=blue)](https://github.com/katbyte/terrafmt/blob/main/LICENSE) ![build](https://github.com/katbyte/terrafmt/actions/workflows/build.yaml/badge.svg) ![test](https://github.com/katbyte/terrafmt/actions/workflows/pr-tests.yaml/badge.svg) From f2e86bbd402f0a70cc7a75ee86e830b940aad545 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:18:42 -0700 Subject: [PATCH 05/10] Lowercase the build and tests workflow names --- .github/workflows/build.yaml | 2 +- .github/workflows/pr-tests.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 6cc58d17..e7fa1436 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -1,5 +1,5 @@ --- -name: Build +name: build on: push: branches: [ 'main' ] diff --git a/.github/workflows/pr-tests.yaml b/.github/workflows/pr-tests.yaml index 7776b857..2282c875 100644 --- a/.github/workflows/pr-tests.yaml +++ b/.github/workflows/pr-tests.yaml @@ -1,5 +1,5 @@ --- -name: Tests +name: tests on: push: branches: [ 'main' ] From cb88ab00ce6c4e1d40024dd12e236bc3a53c89ef Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:18:53 -0700 Subject: [PATCH 06/10] Lowercase the codeql workflow name --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 7deb1cdd..405bd900 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -9,7 +9,7 @@ # the `language` matrix defined below to confirm you have the correct set of # supported CodeQL languages. # -name: CodeQL +name: codeql on: push: From f8a5b3273a78f5835f103245a233f48afddbf141 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:22:30 -0700 Subject: [PATCH 07/10] Lowercase all workflow names --- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/pr-check-against-providers.yaml | 2 +- .github/workflows/pr-depscheck.yaml | 2 +- .github/workflows/pr-golangci-lint.yaml | 2 +- .github/workflows/pr-govulncheck.yaml | 2 +- .github/workflows/release.yaml | 2 +- .github/workflows/shellcheck.yaml | 2 +- .github/workflows/typos.yaml | 2 +- .github/workflows/workflow-actionlint.yml | 2 +- .github/workflows/workflow-yamllint.yml | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 405bd900..26608adc 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -9,7 +9,7 @@ # the `language` matrix defined below to confirm you have the correct set of # supported CodeQL languages. # -name: codeql +name: codeQL on: push: diff --git a/.github/workflows/pr-check-against-providers.yaml b/.github/workflows/pr-check-against-providers.yaml index 349e7c10..634ab0e2 100644 --- a/.github/workflows/pr-check-against-providers.yaml +++ b/.github/workflows/pr-check-against-providers.yaml @@ -1,5 +1,5 @@ --- -name: Check Against Providers +name: check against providers on: pull_request: types: ['opened', 'synchronize'] diff --git a/.github/workflows/pr-depscheck.yaml b/.github/workflows/pr-depscheck.yaml index 3702ebee..d6410cb6 100644 --- a/.github/workflows/pr-depscheck.yaml +++ b/.github/workflows/pr-depscheck.yaml @@ -1,5 +1,5 @@ --- -name: Vendor Dependencies Check +name: vendor dependencies check on: push: branches: [ 'main' ] diff --git a/.github/workflows/pr-golangci-lint.yaml b/.github/workflows/pr-golangci-lint.yaml index 15f93bd7..c947c37a 100644 --- a/.github/workflows/pr-golangci-lint.yaml +++ b/.github/workflows/pr-golangci-lint.yaml @@ -1,5 +1,5 @@ --- -name: GolangCI +name: golangCI on: push: branches: [ 'main' ] diff --git a/.github/workflows/pr-govulncheck.yaml b/.github/workflows/pr-govulncheck.yaml index 17d3312c..f85e0378 100644 --- a/.github/workflows/pr-govulncheck.yaml +++ b/.github/workflows/pr-govulncheck.yaml @@ -1,5 +1,5 @@ --- -name: Go Vulnerability Check +name: go vulnerability check on: push: branches: [ 'main' ] diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1c7e1cff..47c72b08 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -1,5 +1,5 @@ --- -name: Release +name: release on: push: tags: ['v*'] diff --git a/.github/workflows/shellcheck.yaml b/.github/workflows/shellcheck.yaml index 88c93623..29c39f27 100644 --- a/.github/workflows/shellcheck.yaml +++ b/.github/workflows/shellcheck.yaml @@ -1,4 +1,4 @@ -name: ShellCheck +name: shellcheck on: push: branches: [ 'main' ] diff --git a/.github/workflows/typos.yaml b/.github/workflows/typos.yaml index 005a05ab..bbc99a17 100644 --- a/.github/workflows/typos.yaml +++ b/.github/workflows/typos.yaml @@ -1,4 +1,4 @@ -name: Typos +name: typos # Spell checks every file in the repo with typos (config in .typos.toml). Complements the misspell # linter in golangci-lint, which only sees Go files. diff --git a/.github/workflows/workflow-actionlint.yml b/.github/workflows/workflow-actionlint.yml index 6b34d396..ad01b29a 100644 --- a/.github/workflows/workflow-actionlint.yml +++ b/.github/workflows/workflow-actionlint.yml @@ -1,4 +1,4 @@ -name: Workflow Action Lint +name: workflow action lint # Lints .github/workflows/ with rhysd/actionlint (expression/context errors, shellcheck on run: # blocks, action input validation). actionlint is pinned in .tools/go.mod (built by make) so the diff --git a/.github/workflows/workflow-yamllint.yml b/.github/workflows/workflow-yamllint.yml index f64364f3..d7090574 100644 --- a/.github/workflows/workflow-yamllint.yml +++ b/.github/workflows/workflow-yamllint.yml @@ -1,4 +1,4 @@ -name: Workflow YAML Lint +name: workflow YAML lint # Lints the repo's YAML (workflows, configs) with yamllint; rules live in .yamllint.yml. # yamllint auto-detects GitHub Actions, emitting ::error annotations that show up inline From bf443a18b36cdb36a3207c85c888bc3c004f7f37 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:24:25 -0700 Subject: [PATCH 08/10] Remove CodeQL badge and relabel Scorecard badge as openSSF --- README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/README.md b/README.md index fa801f74..17c0a096 100644 --- a/README.md +++ b/README.md @@ -6,8 +6,7 @@ ![build](https://github.com/katbyte/terrafmt/actions/workflows/build.yaml/badge.svg) ![test](https://github.com/katbyte/terrafmt/actions/workflows/pr-tests.yaml/badge.svg) ![lint](https://github.com/katbyte/terrafmt/actions/workflows/pr-golangci-lint.yaml/badge.svg) -![CodeQL](https://github.com/katbyte/terrafmt/actions/workflows/codeql-analysis.yml/badge.svg) -[![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/katbyte/terrafmt?label=openssf)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt) +[![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/katbyte/terrafmt?label=openSSF)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt) A tool for extracting and formatting [Terraform](https://www.terraform.io/docs/) configuration embedded in other files, primarily intended to help with [provider](https://www.terraform.io/docs/providers/index.html) development. From ba37cc0cbe62cbf119c0a448bfaae4fadcabc3c2 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:26:03 -0700 Subject: [PATCH 09/10] Restore CodeQL badge --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 17c0a096..a3f082bf 100644 --- a/README.md +++ b/README.md @@ -6,6 +6,7 @@ ![build](https://github.com/katbyte/terrafmt/actions/workflows/build.yaml/badge.svg) ![test](https://github.com/katbyte/terrafmt/actions/workflows/pr-tests.yaml/badge.svg) ![lint](https://github.com/katbyte/terrafmt/actions/workflows/pr-golangci-lint.yaml/badge.svg) +![CodeQL](https://github.com/katbyte/terrafmt/actions/workflows/codeql-analysis.yml/badge.svg) [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/katbyte/terrafmt?label=openSSF)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt) A tool for extracting and formatting [Terraform](https://www.terraform.io/docs/) configuration embedded in other files, primarily intended to help with [provider](https://www.terraform.io/docs/providers/index.html) development. From fa0ca54558dc6816f48b7a458aa09347bf3235e1 Mon Sep 17 00:00:00 2001 From: kt Date: Wed, 9 Sep 2026 18:26:23 -0700 Subject: [PATCH 10/10] Remove test badge --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index a3f082bf..639f4aa8 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,6 @@ [![Go Version](https://img.shields.io/github/go-mod/go-version/katbyte/terrafmt?label=go&color=00ADD8)](https://github.com/katbyte/terrafmt/blob/main/go.mod) [![License](https://img.shields.io/github/license/katbyte/terrafmt?color=blue)](https://github.com/katbyte/terrafmt/blob/main/LICENSE) ![build](https://github.com/katbyte/terrafmt/actions/workflows/build.yaml/badge.svg) -![test](https://github.com/katbyte/terrafmt/actions/workflows/pr-tests.yaml/badge.svg) ![lint](https://github.com/katbyte/terrafmt/actions/workflows/pr-golangci-lint.yaml/badge.svg) ![CodeQL](https://github.com/katbyte/terrafmt/actions/workflows/codeql-analysis.yml/badge.svg) [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/katbyte/terrafmt?label=openSSF)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt)