auth: publish passkey foundations preview
verify / verify (push) Successful in 3m40s

This commit is contained in:
2026-08-21 17:33:00 -04:00
parent fb6bbd0dad
commit bfe6cfd29e
230 changed files with 44547 additions and 17 deletions
+2
View File
@@ -0,0 +1,2 @@
# The maintainers team is a code owner for the whole repository.
* @go-webauthn/maintainers
+15
View File
@@ -0,0 +1,15 @@
# These are supported funding model platforms
github: [go-webauthn, james-d-elliott] # Replace with up to 4 GitHub Sponsors-enabled usernames i.e., [user1, user2]
patreon: # Replace with a single Patreon username
open_collective: # Replace with a single Open Collective username
ko_fi: # Replace with a single Ko-fi username
tidelift: # Replace with a single Tidelift platform-name/package-name i.e., npm/babel
community_bridge: # Replace with a single Community Bridge project-name i.e., cloud-foundry
liberapay: # Replace with a single Liberapay username
issuehunt: # Replace with a single IssueHunt username
lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name i.e., cloud-foundry
polar: # Replace with a single Polar username
buy_me_a_coffee: # Replace with a single Buy Me a Coffee username
thanks_dev: # Replace with a single thanks.dev username
custom: # Replace with up to 4 custom sponsorship URLs i.e., ['link1', 'link2']
@@ -0,0 +1,67 @@
---
name: Bug Report
description: Report a potential bug
labels:
- type/potential-bug
- status/needs-triage
- priority/normal
body:
- type: markdown
attributes:
value: |
Thanks for taking the time to fill out this bug report. Please try to give as much information as possible for
us to be able to reproduce the issue and provide a quick fix.
- type: dropdown
id: version
attributes:
label: Version
description: What version of the library are you using or which versions do you see the issue in?
multiple: true
options:
- '0.17.1'
- '0.16.5'
- '0.15.0'
validations:
required: true
- type: dropdown
id: go-version
attributes:
label: Go Version
description: What version of go are you using?
multiple: true
options:
- '1.26'
- '1.25'
- '1.24'
- 'Other'
validations:
required: true
- type: textarea
id: description
attributes:
label: Description
description: Describe the bug
validations:
required: true
- type: textarea
id: reproduction
attributes:
label: Reproduction
description: Describe how we can reproduce this issue
validations:
required: true
- type: textarea
id: expectations
attributes:
label: Expectations
description: Describe the desired or expected results
validations:
required: false
- type: textarea
id: documentation
attributes:
label: Documentation
description: Provide any relevant specification or other documentation if applicable
validations:
required: false
...
@@ -0,0 +1,10 @@
---
blank_issues_enabled: false
contact_links:
- name: Documentation
url: https://github.com/go-webauthn/webauthn
about: Read the documentation
- name: Question/Other
url: https://github.com/go-webauthn/webauthn/discussions/new
about: Discuss other questions etc.
...
+23
View File
@@ -0,0 +1,23 @@
---
name: Documentation Feedback
description: Report issues or suggestions surrounding documentation
labels:
- type/documentation
- status/needs-triage
- priority/normal
body:
- type: textarea
id: description
attributes:
label: Description
description: Describe the issue or suggestion
validations:
required: true
- type: textarea
id: additional-information
attributes:
label: Additional Information
description: Any additional information that may be useful like links etc
validations:
required: false
...
@@ -0,0 +1,30 @@
---
name: Feature Request
description: Request a feature
labels:
- type/feature-request
- status/needs-triage
- priority/normal
body:
- type: textarea
id: description
attributes:
label: Description
description: Provide a description of the feature
validations:
required: true
- type: textarea
id: use-case
attributes:
label: Use Case
description: Provide a use case if applicable
validations:
required: false
- type: textarea
id: documentation
attributes:
label: Documentation
description: Provide any relevant specification or other documentation if applicable
validations:
required: false
...
+45
View File
@@ -0,0 +1,45 @@
name: 'CodeQL'
on:
push:
branches:
- 'master'
pull_request:
branches:
- 'master'
merge_group:
branches:
- 'master'
schedule:
- cron: '0 0 * * 1'
permissions:
contents: 'read'
jobs:
analyze:
name: 'Analyze'
runs-on: 'ubuntu-latest'
permissions:
actions: 'read'
contents: 'read'
security-events: 'write'
strategy:
fail-fast: false
matrix:
language:
- 'go'
steps:
- name: 'Harden Runner'
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
with:
egress-policy: 'audit'
- name: 'Checkout'
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: 'Initialize CodeQL'
uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
with:
languages: ${{ matrix.language }}
- name: 'Build'
uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
- name: 'Perform CodeQL Analysis'
uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
with:
category: '/language:${{matrix.language}}'
@@ -0,0 +1,23 @@
name: 'Dependency Review'
on:
pull_request:
branches:
- 'master'
merge_group:
branches:
- 'master'
permissions:
contents: 'read'
jobs:
dependency-review:
name: 'Dependency Review'
runs-on: 'ubuntu-latest'
steps:
- name: 'Harden Runner'
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
with:
egress-policy: 'audit'
- name: 'Checkout Repository'
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: 'Dependency Review'
uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
+67
View File
@@ -0,0 +1,67 @@
name: 'Go'
on:
pull_request:
branches:
- 'master'
push:
branches:
- 'master'
merge_group:
branches:
- 'master'
permissions:
contents: 'read'
jobs:
cover:
name: 'Coverage'
runs-on: 'ubuntu-latest'
steps:
- name: 'Harden Runner'
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
with:
egress-policy: 'audit'
- name: 'Set up Go'
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
with:
go-version: '1.26'
- name: 'Checkout'
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: 'Get Dependencies'
run: |
go get -v -t ./...
- name: 'Test'
run: |
go test -coverprofile=coverage.txt -v ./...
- name: 'Coverage'
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
with:
token: ${{ secrets.CODECOV_TOKEN }}
build:
name: 'Build and Test'
runs-on: 'ubuntu-latest'
strategy:
matrix:
go:
- '1.25'
- '1.26'
fail-fast: false
steps:
- name: 'Harden Runner'
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
with:
egress-policy: 'audit'
- name: 'Set up Go ${{ matrix.go }}'
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
with:
go-version: ${{ matrix.go }}
- name: 'Checkout'
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: 'Get Dependencies'
run: |
go get -v -t ./...
- name: 'Build'
run: |
go build -v ./...
- name: 'Test'
run: |
go test -race -v ./...
@@ -0,0 +1,43 @@
name: 'Scorecard'
on:
branch_protection_rule: {}
schedule:
- cron: '20 7 * * 2'
push:
branches:
- 'master'
permissions: 'read-all'
jobs:
analysis:
name: 'Analysis'
runs-on: 'ubuntu-latest'
permissions:
security-events: 'write'
id-token: 'write'
contents: 'read'
actions: 'read'
steps:
- name: 'Harden Runner'
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
with:
egress-policy: 'audit'
- name: 'Checkout'
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- name: 'Run'
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
with:
results_file: 'results.sarif'
results_format: 'sarif'
publish_results: true
- name: 'Upload'
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: 'SARIF file'
path: 'results.sarif'
retention-days: 5
- name: 'Upload to Code Scanning Dashboard'
uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
with:
sarif_file: 'results.sarif'