feat: switch to go root ca certificates (#130)

CodeReaper · web-flow · commit 9ad8fc6c4ecc · 2025-10-22T22:52:43.000+02:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -15,7 +15,3 @@ updates:
     directory: /
     schedule:
       interval: weekly
-  - package-ecosystem: docker
-    directory: /
-    schedule:
-      interval: weekly
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
@@ -15,14 +15,10 @@ jobs:
       - uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
+      - run: echo ${{ secrets.SMOKE_TEST_CREDENTIALS_B64 }} | base64 -d > credentials.json
+        shell: bash
       - run: make test
         shell: bash
-      - name: Upload artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: coverage-artifacts
-          path: build/coverage.*
-          if-no-files-found: error
 
   documentation-tests:
     name: Documentation tests
diff --git a/.tool-versions b/.tool-versions
@@ -1 +1 @@
-golang 1.24.2
+golang 1.25.3
diff --git a/Dockerfile b/Dockerfile
@@ -1,10 +1,8 @@
 FROM golang:alpine AS build
 COPY . .
 ARG VERSION
-RUN go build -trimpath -o /app/ \
-    -ldflags "-s -w -X github.com/codereaper/lane/cmd.versionString=$VERSION"
+RUN go build -trimpath -o /app/ -ldflags "-s -w -X github.com/codereaper/lane/cmd.versionString=$VERSION"
 
 FROM scratch
-COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=build /app/lane /
 ENTRYPOINT [ "/lane" ]
diff --git a/Makefile b/Makefile
@@ -36,13 +36,27 @@ endif
 
 unit-tests:
 	go test -timeout 10s -p 1 -coverprofile=build/coverage.out ./internal/...
+ifeq ($(strip $(GITHUB_STEP_SUMMARY)),)
 	go tool cover -html=build/coverage.out -o build/coverage.html
+	go tool cover -func=build/coverage.out
+else
+	{	\
+		echo '## Code Coverage'; \
+		echo '|File|Method|Coverage|'; \
+		echo '|---|---|--:|'; \
+		go tool cover -func=build/coverage.out | awk -F'\t+' 'BEGIN {OFS=" | "} {print "| " $$1, $$2, $$3 " |"}'; \
+	} | tee -a $(GITHUB_STEP_SUMMARY)
+endif
+
+smoke-test:
+	@if [ -f credentials.json ]; then \
+		go run ./... translations list -c credentials.json; \
+	fi
 
 verify-version:
 ifneq ($(TOOL_VERSION),$(MOD_VERSION))
 	@echo 'Mismatched go versions'
 	@exit 1
 endif
-	@exit 0
 
-test: verify-version tidy unit-tests
+test: verify-version tidy unit-tests smoke-test
diff --git a/TODO.md b/TODO.md
diff --git a/cmd/translations.go b/cmd/translations.go
@@ -2,12 +2,22 @@ package cmd
 
 import (
 	"context"
+	"fmt"
 
 	"github.com/codereaper/lane/internal/downloader"
 	"github.com/codereaper/lane/internal/translations"
 	"github.com/spf13/cobra"
 )
 
+var additionalHelpAboutAuthentication = `Authentication is done using a json file issued by Google. You get this json file by creating a "Service Account Key", which if you do not have a service account, requires you to first create a service account.
+
+Creating both an account and a key is explaining here: https://developers.google.com/identity/protocols/oauth2/service-account#creatinganaccount
+
+You may have to enable Google Drive API access when using it for the first time. The error message(s) should provide a direct link to enabling access.
+
+Make sure to share the sheet with the 'client_email' assigned to your service account.
+`
+
 func newTranslationsCommand() *cobra.Command {
 	var cmd = &cobra.Command{
 		Use:   "translations",
@@ -16,23 +26,40 @@ func newTranslationsCommand() *cobra.Command {
 	}
 	cmd.AddCommand(newTranslationsDownloadCommand())
 	cmd.AddCommand(newTranslationsGenerateCommand())
+	cmd.AddCommand(newTranslationsListCommand())
 	return cmd
 }
 
-func newTranslationsDownloadCommand() *cobra.Command {
-	var additionalHelp = `Authentication is done using a json file issued by Google. You get this json file by creating a "Service Account Key", which if you do not have a service account, requires you to first create a service account.
-
-Creating both an account and a key is explaining here: https://developers.google.com/identity/protocols/oauth2/service-account#creatinganaccount
-
-You may have to enable Google Drive API access when using it for the first time. The error message(s) should provide a direct link to enabling access.
+func newTranslationsListCommand() *cobra.Command {
+	var credentials string
+	var cmd = &cobra.Command{
+		Use:     "list",
+		Short:   "List google sheets",
+		Long:    additionalHelpAboutAuthentication,
+		Example: "  lane translations list -c google-api.json",
+		RunE: func(cmd *cobra.Command, args []string) error {
+			list, err := downloader.List(context.Background(), credentials)
+			if err != nil {
+				return err
+			}
+			fmt.Printf("Documents (count: %d):\n", len(list))
+			for id, name := range list {
+				fmt.Printf("Id: %s \tName: %s\n", id, name)
+			}
+			return nil
+		},
+	}
+	cmd.Flags().StringVarP(&credentials, "credentials", "c", "", "A path to the credentials json file issued by Google (Required).")
+	cmd.MarkFlagRequired("credentials")
+	return cmd
+}
 
-Make sure to share the sheet with the 'client_email' assigned to your service account.
-`
+func newTranslationsDownloadCommand() *cobra.Command {
 	var flags downloader.Flags
 	var cmd = &cobra.Command{
 		Use:     "download",
-		Short:   "Download translations",
-		Long:    additionalHelp,
+		Short:   "Download google sheets",
+		Long:    additionalHelpAboutAuthentication,
 		Example: "  lane translations download -o output.csv -c google-api.json -d 11p...ev7lc -f csv",
 		RunE: func(cmd *cobra.Command, args []string) error {
 			return downloader.Download(context.Background(), &flags)
diff --git a/docs/generated/lane_translations.md b/docs/generated/lane_translations.md
@@ -15,6 +15,7 @@ Download translations from google sheets and/or generate translations from local
 ### SEE ALSO
 
 * [lane](lane.md)	 - Automates common tasks
-* [lane translations download](lane_translations_download.md)	 - Download translations
+* [lane translations download](lane_translations_download.md)	 - Download google sheets
 * [lane translations generate](lane_translations_generate.md)	 - Generate translations files from a csv file
+* [lane translations list](lane_translations_list.md)	 - List google sheets
 
diff --git a/docs/generated/lane_translations_download.md b/docs/generated/lane_translations_download.md
@@ -1,6 +1,6 @@
 ## lane translations download
 
-Download translations
+Download google sheets
 
 ### Synopsis
 
diff --git a/docs/generated/lane_translations_list.md b/docs/generated/lane_translations_list.md
@@ -0,0 +1,36 @@
+## lane translations list
+
+List google sheets
+
+### Synopsis
+
+Authentication is done using a json file issued by Google. You get this json file by creating a "Service Account Key", which if you do not have a service account, requires you to first create a service account.
+
+Creating both an account and a key is explaining here: https://developers.google.com/identity/protocols/oauth2/service-account#creatinganaccount
+
+You may have to enable Google Drive API access when using it for the first time. The error message(s) should provide a direct link to enabling access.
+
+Make sure to share the sheet with the 'client_email' assigned to your service account.
+
+
+```
+lane translations list [flags]
+```
+
+### Examples
+
+```
+  lane translations list -c google-api.json
+```
+
+### Options
+
+```
+  -c, --credentials string   A path to the credentials json file issued by Google (Required).
+  -h, --help                 help for list
+```
+
+### SEE ALSO
+
+* [lane translations](lane_translations.md)	 - Manage translations
+
diff --git a/go.mod b/go.mod
@@ -1,10 +1,11 @@
 module github.com/codereaper/lane
 
-go 1.24.2
+go 1.25.3
 
 require (
 	github.com/spf13/cobra v1.10.1
 	github.com/stretchr/testify v1.11.1
+	golang.org/x/crypto/x509roots/fallback v0.0.0-20251009181029-0b7aa0cfb07b
 	google.golang.org/api v0.252.0
 )
 
diff --git a/go.sum b/go.sum
@@ -61,6 +61,8 @@ go.opentelemetry.io/otel/trace v1.37.0 h1:HLdcFNbRQBE2imdSEgm/kwqmQj1Or1l/7bW6mx
 go.opentelemetry.io/otel/trace v1.37.0/go.mod h1:TlgrlQ+PtQO5XFerSPUYG0JSgGyryXewPGyayAWSBS0=
 golang.org/x/crypto v0.42.0 h1:chiH31gIWm57EkTXpwnqf8qeuMUi0yekh6mT2AvFlqI=
 golang.org/x/crypto v0.42.0/go.mod h1:4+rDnOTJhQCx2q7/j6rAN5XDw8kPjeaXEUR2eL94ix8=
+golang.org/x/crypto/x509roots/fallback v0.0.0-20251009181029-0b7aa0cfb07b h1:YjNArlzCQB2fDkuKSxMwY1ZUQeRXFIFa23Ov9Wa7TUE=
+golang.org/x/crypto/x509roots/fallback v0.0.0-20251009181029-0b7aa0cfb07b/go.mod h1:MEIPiCnxvQEjA4astfaKItNwEVZA5Ki+3+nyGbJ5N18=
 golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I=
 golang.org/x/net v0.44.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
 golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo=
diff --git a/internal/downloader/downloader.go b/internal/downloader/downloader.go
@@ -26,6 +26,30 @@ func Download(ctx context.Context, flags *Flags) error {
 	return download(flags, service)
 }
 
+// List fetches a map of document id to document names
+func List(ctx context.Context, credentials string) (map[string]string, error) {
+	service, err := newService(ctx, credentials)
+	if err != nil {
+		return nil, err
+	}
+
+	return list(service)
+}
+
+func list(service Service) (map[string]string, error) {
+	list, err := service.list()
+	if err != nil {
+		return nil, err
+	}
+
+	result := make(map[string]string, 0)
+	for _, file := range list.Files {
+		result[file.Id] = file.Name
+	}
+
+	return result, nil
+}
+
 func download(flags *Flags, service Service) error {
 	if err := flags.validate(); err != nil {
 		return err
diff --git a/internal/downloader/downloader_test.go b/internal/downloader/downloader_test.go
diff --git a/internal/downloader/service.go b/internal/downloader/service.go
diff --git a/internal/downloader/service_test.go b/internal/downloader/service_test.go
diff --git a/main.go b/main.go
