Merge pull request #1 from applejag/feature/ci

Author: applejag

.github/workflows/ci.yml

@@ -0,0 +1,68 @@
+# SPDX-FileCopyrightText: 2026 Kalle Fagerberg
+#
+# SPDX-License-Identifier: CC0-1.0
+
+name: ci
+on:
+  push:
+    branches:
+      - "main"
+  pull_request:
+
+permissions: {}
+
+jobs:
+  zizmor:
+    name: Run zizmor 🌈
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor 🌈
+        uses: zizmorcore/zizmor-action@135698455da5c3b3e55f73f4419e481ab68cdd95 # v0.4.1
+
+  reuse:
+    name: REUSE Compliance Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false
+      - uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false
+
+      - name: setup go
+        uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # 6.2.0
+        with:
+          go-version-file: go.mod
+
+      - name: install gotestsum
+        run: go install gotest.tools/gotestsum@latest
+
+      - name: run gotestsum
+        env:
+          FORCE_COLOR: "true"
+        run: gotestsum ./...
+
+      - uses: jdx/mise-action@c53b9236f0b3370f31520f8b142f141256d839c6 # v3.6.0
+        with:
+          install_args: aqua:tinygo-org/tinygo protoc protoc-gen-go github:firefly-zero/firefly-cli
+
+      - name: try build
+        run: |
+          mise run build
+
+      - name: Git diff
+        run: git diff --exit-code

.github/workflows/labeler.yml

@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2026 Kalle Fagerberg
+#
+# SPDX-License-Identifier: CC0-1.0
+
 name: "Pull Request Labeler"
 on:
   # Using "pull_request_target" is generally a security hole, but only

REUSE.toml

@@ -5,7 +5,12 @@
 version = 1
 
 [[annotations]]
-path = "**/*.go"
+path = [
+    "**/*.go",
+    "**/*.proto",
+    "assets/*.png",
+    "assets/*.pxo",
+]
 SPDX-FileCopyrightText = "2026 Kalle Fagerberg"
 SPDX-License-Identifier = "MIT"
 

assets/fonts/pico8_4x6.fff.license

@@ -1,3 +1,5 @@
+SPDX-FileCopyrightText: PICO-8
+
 SPDX-License-Identifier: CC0-1.0
 
 Downloaded from https://fonts.fireflyzero.com/ascii