Bdk38 patch 4

.github/workflows/go.yml

@@ -1,4 +1,6 @@
 name: Vibe Check
+permissions:
+  contents: read
 
 on:
   push:
@@ -9,17 +11,17 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: 1.24
+          go-version: 1.25.8
       - name: go vet -v ./...
         run: go vet -v ./...
       - name: gosec ./...
         run: | # https://github.com/securego/gosec/issues/469
           export PATH=$PATH:$(go env GOPATH)/bin
-          go install github.com/securego/gosec/v2/cmd/gosec@latest
+          go install github.com/securego/gosec/v2/cmd/gosec@v2.22.0
           gosec ./...
       - name: go test -race -v ./...
         run: go test -race -v ./...

.github/workflows/release-command.yml

@@ -1,3 +1,4 @@
+# GHCR pushes removed; 386 builds removed
 name: Build and Release
 
 on:
@@ -8,18 +9,25 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     strategy:
       matrix:
         goos: [linux, windows, darwin, freebsd]
-        goarch: ["386", amd64, arm64]
+        goarch: [amd64, arm64]
         exclude:
-          - goarch: "386"
-            goos: darwin
           - goarch: arm64
             goos: windows
     steps:
-      - uses: actions/checkout@v4
-      - uses: wangyoucao577/go-release-action@v1.53
+      - name: Check required secrets
+        if: github.event_name != 'pull_request'
+        run: |
+          if [ -z "${{ secrets.DOCKERHUB_USERNAME }}" ] || [ -z "${{ secrets.DOCKERHUB_TOKEN }}" ]; then
+            echo "Error: DOCKERHUB_USERNAME and DOCKERHUB_TOKEN secrets are required for publishing."
+            exit 1
+          fi
+      - uses: actions/checkout@v6
+      - uses: wangyoucao577/go-release-action@v1.55
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           goos: ${{ matrix.goos }}
@@ -36,18 +44,12 @@ jobs:
           md5sum: FALSE
           sha256sum: TRUE
           overwrite: TRUE
-
-  docker:
-    runs-on: ubuntu-latest
-    steps:
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: |
-            yunginnanet/hellpot
-            ghcr.io/yunginnanet/hellpot
-          # generate Docker tags based on the following events/attributes
+            bdk38/hellpot-community
           tags: |
             type=ref,event=branch
             type=ref,event=pr
@@ -58,27 +60,19 @@ jobs:
 
       - name: Login to Docker Hub
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
-          username: ${{ github.repository_owner }}
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Login to GHCR
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.PAT }}
-
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.meta.outputs.tags }}

.github/workflows/release.yml

@@ -0,0 +1,124 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build:
+    name: Build for ${{ matrix.os }}-${{ matrix.arch }}
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      matrix:
+        include:
+          - os: linux
+            arch: amd64
+            runner: ubuntu-latest
+          - os: linux
+            arch: arm64
+            runner: ubuntu-latest
+          - os: linux
+            arch: arm
+            runner: ubuntu-latest
+          - os: windows
+            arch: amd64
+            runner: ubuntu-latest
+          - os: darwin
+            arch: amd64
+            runner: macos-latest
+          - os: darwin
+            arch: arm64
+            runner: macos-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: stable
+
+      - name: Build binary
+        env:
+          GOOS: ${{ matrix.os }}
+          GOARCH: ${{ matrix.arch }}
+          CGO_ENABLED: 0
+        run: |
+          VERSION="${GITHUB_REF#refs/tags/}"
+
+          BINARY_NAME="HellPot-Community-${VERSION}-${{ matrix.os }}-${{ matrix.arch }}"
+          if [ "${{ matrix.os }}" = "windows" ]; then
+            BINARY_NAME="${BINARY_NAME}.exe"
+          fi
+
+          go build -trimpath \
+            -ldflags "-s -w -X main.version=${VERSION}" \
+            -o "${BINARY_NAME}" \
+            ./cmd/HellPot
+
+      - name: Generate checksum
+        run: |
+          VERSION="${GITHUB_REF#refs/tags/}"
+          BINARY_NAME="HellPot-Community-${VERSION}-${{ matrix.os }}-${{ matrix.arch }}"
+          if [ "${{ matrix.os }}" = "windows" ]; then
+            BINARY_NAME="${BINARY_NAME}.exe"
+          fi
+          sha256sum "${BINARY_NAME}" > "${BINARY_NAME}.sha256"
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v7
+        with:
+          name: HellPot-Community-${{ matrix.os }}-${{ matrix.arch }}
+          path: |
+            HellPot-Community-*
+
+  release:
+    name: Create Release
+    needs: build
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v8
+        with:
+          path: ./binaries
+
+      - name: Prepare release assets
+        run: |
+          mkdir -p release-assets
+          find ./binaries -type f -exec mv {} ./release-assets/ \;
+          cd release-assets
+          find . -name 'HellPot-*' ! -name '*.sha256' -exec sha256sum {} \; > checksums.sha256.txt
+
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          draft: false
+          generate_release_notes: true
+          files: ./release-assets/*
+          body: |
+            ## HellPot Community ${{ github.ref_name }}
+
+            ### 📦 Downloads
+            Download the appropriate binary for your platform below.
+
+            ### 🔒 Verify Checksums
+            ```bash
+            sha256sum -c checksums.sha256.txt
+            ```
+
+            ### 📝 Release Notes
+            See below for detailed changes.

.github/workflows/trigger.yml

@@ -4,18 +4,20 @@ on:
     types: [created]
 jobs:
   slashCommandDispatch:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Slash Command Dispatch
         id: scd
-        uses: peter-evans/slash-command-dispatch@v4
+        uses: peter-evans/slash-command-dispatch@v5
         with:
           token: ${{ secrets.PAT }}
           commands: |
             release
           dispatch-type: workflow
           permission: admin
-          repository: yunginnanet/HellPot
+          repository: bdk38/HellPot
           static-args: |
             repository=${{ github.repository }}
             comment-id=${{ github.event.comment.id }}

.gitignore

@@ -4,5 +4,7 @@ HellPot
 .idea/
 *.save
 *.toml
+!internal/config/default_config.toml
+!config.toml
 *.yaml
 .backups/

CHANGELOG.md

@@ -0,0 +1,5 @@
+## [0.6.1] - 2026-03-08
+### Fixed
+- `logger.debug` and `logger.trace` in config.toml now actually work
+- CLI flag parsing rewritten with Go's standard `flag` package (more reliable)
+- Debug/trace override logic now correctly defaults to INFO level

Dockerfile

@@ -1,25 +1,59 @@
-FROM golang:1.23 AS build
+# ==============================================================================
+# Build Stage: Compile the Go source and prepares the filesystem
+# ==============================================================================
+#
+# use newer golang because that's what I'm building with currently
+FROM golang:1.25.8 AS build
+#
+# set the primary directory for build commands
 WORKDIR /go/src/app
-
+#
+# cache dependencies
 COPY go.* .
 RUN go mod download
-
+#
+# copy source
 COPY . .
-
+#
+# quality control
 RUN go vet -v ./...
 RUN go test -v ./...
-RUN \
-    CGO_ENABLED=0 \
-    VERSION=`git tag --sort=-version:refname | head -n 1` \
+#
+# build binary with versioning and optimization outputting directly to /app for simplicity
+RUN CGO_ENABLED=0 \
+    VERSION=$(git tag --sort=-version:refname | head -n 1 || echo "dev") \
     go build -trimpath \
     -ldflags "-s -w -X main.version=$VERSION" \
+    -o /app \
     cmd/HellPot/*.go
-
-
-FROM gcr.io/distroless/static-debian11
-LABEL org.opencontainers.image.source https://github.com/yunginnanet/HellPot
-
-COPY --from=build /go/src/app/HellPot /app
-COPY --from=build /go/src/app/docker_config.toml /config
+#
+# prepare Workspace and create directories
+RUN mkdir -p /config /logs && \
+    cp docker_config.toml /config/config.toml
+#
+# ==============================================================================
+# Final Stage: Minimal production image with a zero-privilege security profile
+# ==============================================================================
+#
+# upgrade distro for lts
+FROM gcr.io/distroless/static-debian13
+#
+# changed repo url
+LABEL org.opencontainers.image.source="https://github.com/bdk38/HellPot"
+#
+# copy the binary and directories with non-root user
+COPY --from=build --chown=65532:65532 /app /app
+COPY --from=build --chown=65532:65532 /config /config
+COPY --from=build --chown=65532:65532 /logs /logs
+#
+# add volumes for config and log files
+VOLUME ["/config", "/logs"]
+#
+# expose default port
 EXPOSE 8080
-ENTRYPOINT ["/app", "-c", "/config"]
+#
+# run as non-root user
+USER 65532
+#
+# execute the binary with the configuration flag as the default container process
+ENTRYPOINT ["/app", "-c", "/config/config.toml"]