docker/skills-cache/provider-golangci-lint-uplift/SKILL.md
>-
npx skillsauth add agentdevsl/agentpane provider-golangci-lint-upliftInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Fetch the latest golangci-lint config from the HashiCorp
terraform-provider-scaffolding-framework repo and additively merge any
missing linters, settings, and sections into the local project's config. Local
customizations are always preserved.
Teams invest effort tuning their lint config — extra linters, custom thresholds, project-specific exclusions. Removing or overwriting those decisions causes friction and breaks trust. The scaffolding config represents a minimum standard; anything the local project already has beyond that baseline is the team's prerogative.
| Scenario | Action | Reason | |---|---|---| | Item in baseline, missing locally | Add | Bring up to minimum standard | | Item in local, not in baseline | Keep | Local exceeds baseline | | Item in both, values differ | Keep local | Local customization wins |
This applies uniformly across linters, settings, formatters, exclusions, and top-level sections. Never remove, replace, or overwrite existing config.
The remote scaffolding repo is always the source of truth. Fetch it first:
gh api repos/hashicorp/terraform-provider-scaffolding-framework/contents/.golangci.yml --jq '.content' | base64 -d
If the fetch fails (no network, rate limit, auth issue), fall back to the
snapshot in references/baseline.yml — but inform the user that you're using a
cached version and suggest they retry with network access later.
Read .golangci.yml (or the path provided as argument).
version key, uses linters-settings instead of
linters.settings): Inform the user that a v1-to-v2 migration is needed
before this skill can be applied, and stop. The golangci-lint v2 migration
guide is at https://golangci-lint.run/product/migration-guide/.Compare the local config against the fetched baseline. Present a delta report before making any changes:
To add — items in baseline, missing locally:
Already present — items in both configs (no action needed)
Local extras — items in local only (will be preserved as-is)
Wait for user confirmation before proceeding to changes.
linters.enable, maintaining
alphabetical order.linters.settings. For
compound settings like depguard, merge missing deny rules into existing
rule groups without duplicating or removing existing rules.issues, formatters).linters.exclusions.formatters.enable.Run both checks and report results:
go build ./...
For linting, use whichever is available:
golangci-lint run ./...
# or if not on PATH:
go run github.com/golangci/golangci-lint/v2/cmd/golangci-lint@latest run ./...
Create a spec history file at spec/history/NNN-uplift-golangci-lint-config.md
with:
Use the next available number prefix.
development
AWS security assessment domains, risk rating framework, CIS/NIST reference baselines, and evidence-based finding format. Use when reviewing AWS security posture, assessing risk, or applying CIS/NIST baselines to Terraform configurations.
testing
--- name: "tf-runtask" description: "Retrieve and display Terraform Cloud/Enterprise run task results for a given run. Use this skill whenever the user asks about run task results, run task checks, task stage statuses, or wants to inspect what run tasks reported for a Terraform Cloud/Enterprise run. Triggers on phrases like "check the run tasks", "what did the run tasks say", "show run task results", "get task results for run-xxx", or any reference to run task outcomes on a specific run." source
devops
Research strategies for AWS documentation, provider docs, and public registry patterns. Use when researching AWS services, investigating provider resources, or studying public registry modules for design patterns.
development
Validation results summary template for Phase 4 output. Provides the format for reporting terraform test, validate, fmt, tflint, pre-commit, trivy, and security checklist results.