chore: add Go Report Card badge and security scanning

- Add Go Report Card badge to README
- Add security scanning to Makefile
- Add security scanning to CI workflow
- Enhance pre-commit hooks with security checks

Author: dl-alexandre

.githooks/pre-commit

@@ -6,16 +6,34 @@ cd "$repo_root"
 
 export PATH="$(go env GOPATH)/bin:$PATH"
 
-echo "Running format checks..."
+echo "Running pre-commit checks..."
+
+# Run format checks
+echo "  → Running format checks..."
 make format
 if ! git diff --quiet; then
-  echo "Formatting changed files. Please review and re-stage:"
+  echo "Error: Formatting changed files. Please review and re-stage:"
   git --no-pager diff --name-only
   exit 1
 fi
 
-echo "Running lint checks..."
+# Run lint checks
+echo "  → Running lint checks..."
 make lint
 
-echo "Running short test suite..."
-go test -short ./...
+# Run security scan
+echo "  → Running security scan..."
+if ! make security; then
+  echo "Error: Security scan failed. Fix security issues before committing."
+  exit 1
+fi
+
+# Run tests
+echo "  → Running short test suite..."
+if ! go test -short ./...; then
+  echo "Error: Tests failed."
+  exit 1
+fi
+
+echo "All checks passed!"
+exit 0

.github/workflows/ci.yml

@@ -176,7 +176,6 @@ jobs:
   security:
     name: Security Scan
     runs-on: ubuntu-latest
-    needs: test
 
     steps:
       - name: Checkout code
@@ -195,8 +194,5 @@ jobs:
           go-version: '1.24.x'
           cache: true
 
-      - name: Run govulncheck
-        continue-on-error: true
-        run: |
-          go install golang.org/x/vuln/cmd/govulncheck@latest
-          govulncheck ./...
+      - name: Run security scan
+        run: make security

Makefile

@@ -1,4 +1,4 @@
-.PHONY: all build build-pure clean test test-pure bench fmt vet lint security checksums version c-lib deps format install-hooks setup
+.PHONY: all build build-pure clean test test-pure bench fmt vet lint security checksums version c-lib deps format install-hooks setup check
 
 # Build settings
 BINARY_NAME=cimis
@@ -95,10 +95,16 @@ checksums:
 version: build
 	@./$(BUILD_DIR)/$(BINARY_NAME) version
 
+# Run all checks (format, vet, lint, test)
+.PHONY: check
+check: format vet lint test
+
 # Download dependencies
+.PHONY: deps
 deps:
 	$(GO) mod download
 	$(GO) mod tidy
+	$(GO) mod verify
 
 # Format code (alias for existing fmt)
 format: fmt

README.md

@@ -1,5 +1,7 @@
 # CIMIS CLI Tool
 
+[![Go Report Card](https://goreportcard.com/badge/github.com/dl-alexandre/cimis-cli)](https://goreportcard.com/report/github.com/dl-alexandre/cimis-cli)
+
 A command-line tool for fetching, storing, and querying California Irrigation Management Information System (CIMIS) weather data.
 
 Built on top of the [cimis-tsdb](https://github.com/dl-alexandre/cimis-tsdb) high-performance time-series storage library.