InditexTech · inditextechci-sync · Sep 10, 2026 · Sep 10, 2026 · Sep 10, 2026 · Sep 10, 2026
@@ -0,0 +1,50 @@
+# SPDX-FileCopyrightText: 2026 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
+# SPDX-License-Identifier: Apache-2.0
+name: Bug Report
+description: Report a reproducible bug
+title: '[Bug] '
+labels: ['bug']
+assignees: []
+
+body:
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: What's the problem?
+    validations:
+      required: true
+
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to Reproduce
+      description: How can we reproduce the bug?
+      placeholder: |
+        1. Go to ...
+        2. Run ...
+        3. See error
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected Behavior
+    validations:
+      required: false
+
+  - type: input
+    id: version
+    attributes:
+      label: Version / Environment
+      placeholder: "e.g. v0.3.2, Node 18, macOS"
+    validations:
+      required: false
+
+  - type: textarea
+    id: notes
+    attributes:
+      label: Additional context or logs
+    validations:
+      required: false
@@ -0,0 +1,33 @@
+# SPDX-FileCopyrightText: 2026 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
+# SPDX-License-Identifier: Apache-2.0
+name: Feature Request
+description: Suggest a feature or improvement
+title: '[Feature] '
+labels: ['enhancement']
+assignees: []
+
+body:
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Feature description
+      description: What would you like to see added or changed?
+    validations:
+      required: true
+
+  - type: textarea
+    id: motivation
+    attributes:
+      label: Use case or motivation
+      description: Why is this feature useful?
+
+  - type: dropdown
+    id: contribution
+    attributes:
+      label: Would you like to work on this?
+      options:
+        - Yes, I'd like to open a PR
+        - Maybe, I'd need help
+        - No, I'm just proposing it
+    validations:
+      required: true
@@ -0,0 +1,37 @@
+# SPDX-FileCopyrightText: 2026 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
+# SPDX-License-Identifier: Apache-2.0
+name: Other
+description: Use this for anything that doesn't fit the other templates
+title: '[Other] '
+labels: ['discussion']
+assignees: []
+
+body:
+  - type: textarea
+    id: context
+    attributes:
+      label: Context or topic
+      description: Briefly explain what this is about — question, idea, feedback, etc.
+    validations:
+      required: true
+
+  - type: textarea
+    id: details
+    attributes:
+      label: Details or background
+      description: Add any supporting info, links, logs, or notes that may be useful.
+      placeholder: |
+        Example:
+        - I'm wondering if we should improve X
+        - This tool might be useful for Y
+        - We discussed this in meeting Z
+
+  - type: dropdown
+    id: nextstep
+    attributes:
+      label: What are you hoping to do next?
+      options:
+        - Just opening this for awareness
+        - Looking for input before starting work
+        - Need help or advice
+        - Happy to open a PR based on feedback
@@ -0,0 +1,3 @@
+# SPDX-FileCopyrightText: 2026 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
+# SPDX-License-Identifier: Apache-2.0
+blank_issues_enabled: false
@@ -0,0 +1,21 @@
+<!--
+SPDX-FileCopyrightText: 2026 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
+
+SPDX-License-Identifier: Apache-2.0
+-->
+
+## Summary
+
+Briefly describe the purpose of this PR and what changes it introduces.
+
+## Checklist
+
+- [ ] Commits are **signed** (`git commit -S`)
+- [ ] Commit messages follow **Conventional Commits**
+- [ ] Documentation has been updated (if needed)
+- [ ] I have read and agree to the project’s [Code of Conduct](../CODE_OF_CONDUCT.md)
+- [ ] I have signed the [Contributor License Agreement (CLA)](../CONTRIBUTING.md)
+
+## Additional context
+
+Add any screenshots, test output, or notes for reviewers here.
@@ -0,0 +1,7 @@
+{
+  "artifacts": "none",
+  "schema_version": 1,
+  "sonar": true,
+  "verify_command": "make verify",
+  "working_directory": "."
+}
@@ -0,0 +1,54 @@
+{
+  "configuration": {
+    "development_flow": "trunk-based",
+    "outputs": [
+      "gh-release"
+    ],
+    "parameters": {
+      "artifacts": "none",
+      "sonar": true,
+      "verify_command": "make verify",
+      "working_directory": "."
+    }
+  },
+  "creation_year": 2026,
+  "integrity": {
+    "algorithm": "hmac-sha256",
+    "signature": "c7dacb95bfc4505c1eb64a7abfdfaad3d0d6b22952279d3aa8c0df3010bf65ea"
+  },
+  "managed_by": "InditexTech CI governance",
+  "managed_paths": {
+    ".github/ISSUE_TEMPLATE/1-bug.yml": "cd4dad3f32fe707e06324790a2fe2c25829c55566de2b459d744e785b36e1205",
+    ".github/ISSUE_TEMPLATE/2-feature.yml": "ebb92730d6c01641d055f97ac094cbe07f88fac24be9b689ddf26e47e7bda863",
+    ".github/ISSUE_TEMPLATE/3-other.yml": "5a839b39a98704036210dee498146f51bd5a6c057228685680e02004ff063a9a",
+    ".github/ISSUE_TEMPLATE/config.yml": "10e5dee4d49aa9e7792ceb4c986160c61f95da1ba00a64bf06e5f1f636cd17ec",
+    ".github/PULL_REQUEST_TEMPLATE.md": "23a0b0ac79a9020ccac9c013582a01f86e2df2ae7f914673583b9a3368313041",
+    ".github/inditextech-ci-go.json": "b0e32b653ec535b83e803ec54b688df558593b2ad234cb3cfaf9b42f209a7933",
+    ".github/workflows/code-gomod_go-PR_verify.yml": "76aefd67d70c17d44252cb2854191c6530cfc176f49d3a481a65eac2f4989fb9",
+    ".github/workflows/code-gomod_go-release-core.yml": "5eb3b8c7b5d09f9ad1b5d844b58bd0de877de1f13cd9e3dc2da5d6af0b793b07",
+    ".github/workflows/code-gomod_go-release.yml": "d2d6babc6d37f7d85eb12051d7ab05d0731471d8fea77a437eb51660df08135b",
+    ".github/workflows/code-gomod_go-sonarcloud-analysis.yml": "fcb5c72a4ae59a3b429420b1e15eda5c4c0cb4a0aa89c3f4f99eb2e3198dcaca",
+    ".github/workflows/code-release_preview.yml": "5bb379d87f946c3e5cca829b3d3a3071188cc045dd6ebe514732c06662f91181",
+    ".github/workflows/codeql.yml": "cdd995b56f89f38fbe2cdfd2701e8e6b1d632710da4d9768e8afdf1225a9454b",
+    ".github/workflows/pr-verify.yml": "f52295fbfe81578c0a6459d8b384be569933ac78d32fff370932a8dec6943e46",
+    ".github/workflows/push-verify.yml": "fd700ba0ee23fdee9cd7ecf23ad386247f4b621b73cc1946f9ef0eda4ea07086",
+    ".github/workflows/scorecard-analysis.yml": "5bd6da647f708cced5d33411cc27aac7f7ee2be06ae541defea677d70fe80481",
+    "CODE_OF_CONDUCT.md": "ce1e7a8f68a7917d48c03f9f7aae5529367f73af0e959276e889d33ea1e8d4ab",
+    "SECURITY.md": "0ee7a3356bc3a1c7649e3b7a6a9012b0608011be2b1ff8d106ad02c8950bab25",
+    "repolinter.json": "0efb305c47a63f03c488a34906fc2d5471c84145c2ff553f2aacf3a41b92e1a1"
+  },
+  "managed_variables": {
+    "DEVELOPMENT_FLOW": "trunk-based-development",
+    "WORKING_DIRECTORY": "."
+  },
+  "profile": "go",
+  "repository_id": 938682244,
+  "retained_paths": {
+    "CONTRIBUTING.md": "368be3edf5cae6b3fa0b10bc8ab2395f2e37e2e71f0013800c5d9d61e80b06d4"
+  },
+  "schema_version": 2,
+  "source_digests": {
+    "base": "3d2a77fa08c7469099ee502cf516bb74e40735fb5f9ea93e0850bb45c6297e53",
+    "go": "31367912deed08276e552542d3f117d526d874c4c30206f99c5266ae465aae8e"
+  }
+}
@@ -0,0 +1,107 @@
+# SPDX-FileCopyrightText: 2026 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
+# SPDX-License-Identifier: Apache-2.0
+
+name: code-gomod-go-PR-verify
+
+on:
+  pull_request:
+    types: [opened, synchronize, ready_for_review, reopened]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: code-gomod-go-pr-verify-${{ github.repository }}-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+env:
+  WORKING_DIRECTORY: ${{ vars.WORKING_DIRECTORY }}
+  COMPONENT_DESCRIPTOR: .github/inditextech-ci-go.json
+  ASDF_BRANCH_VERSION: '0.18.0'
+
+jobs:
+  verify:
+    name: Code / Verify
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    steps:
+      - name: Check out pull request head
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+          ref: ${{ github.event.pull_request.head.sha }}
+
+      - name: Read governed tool versions
+        id: tool-versions
+        working-directory: ${{ env.WORKING_DIRECTORY }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          resolved=""
+          if [[ -f .tool-versions ]]; then
+            if grep -vE '^[[:space:]]*(#|$)' .tool-versions | grep -qvE '^[a-zA-Z0-9_-]+ [a-zA-Z0-9._+-]+$'; then
+              echo "::error title=Invalid tool-versions::${WORKING_DIRECTORY}/.tool-versions is malformed."
+              exit 1
+            fi
+            resolved="$(grep -E '^golang ' .tool-versions || true)"
+          fi
+          if [[ -z "$resolved" ]]; then
+            if [[ ! -f go.mod ]]; then
+              echo "::error title=Missing go toolchain::${WORKING_DIRECTORY} has no golang pin in .tool-versions and no go.mod to derive one from."
+              exit 1
+            fi
+            version="$(sed -nE 's/^toolchain[[:space:]]+go([0-9]+\.[0-9]+(\.[0-9]+)?)[[:space:]]*$/\1/p' go.mod | head -n 1)"
+            if [[ -z "$version" ]]; then
+              version="$(sed -nE 's/^go[[:space:]]+([0-9]+\.[0-9]+(\.[0-9]+)?)[[:space:]]*$/\1/p' go.mod | head -n 1)"
+            fi
+            if [[ -z "$version" ]]; then
+              echo "::error title=Missing go toolchain::${WORKING_DIRECTORY}/go.mod declares no usable go version."
+              exit 1
+            fi
+            if [[ "$version" != *.*.* ]]; then
+              version="${version}.0"
+            fi
+            resolved="golang ${version}"
+            echo "::notice title=Derived go toolchain::Using ${resolved} from ${WORKING_DIRECTORY}/go.mod."
+          fi
+          {
+            echo "tool_versions<<EOF"
+            echo "$resolved"
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Set up asdf-managed Go
+        uses: asdf-vm/actions/install@b7bcd026f18772e44fe1026d729e1611cc435d47 # v4.0.1
+        with:
+          tool_versions: ${{ steps.tool-versions.outputs.tool_versions }}
+          asdf_version: ${{ env.ASDF_BRANCH_VERSION }}
+
+      - name: Resolve governed verify command
+        id: descriptor
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ ! -f "$COMPONENT_DESCRIPTOR" ]]; then
+            echo "::error title=Missing descriptor::${COMPONENT_DESCRIPTOR} not found."
+            exit 1
+          fi
+          verify_command="$(jq -er '.verify_command // "make verify"' "$COMPONENT_DESCRIPTOR")"
+          if [[ -z "$verify_command" ]]; then
+            echo "::error title=Empty verify command::descriptor verify_command must not be blank."
+            exit 1
+          fi
+          {
+            echo "verify_command<<EOF"
+            echo "$verify_command"
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Verify and test
+        working-directory: ${{ env.WORKING_DIRECTORY }}
+        shell: bash
+        env:
+          VERIFY_COMMAND: ${{ steps.descriptor.outputs.verify_command }}
+        run: |
+          set -euo pipefail
+          bash -c "$VERIFY_COMMAND"