Update heimdall metadata (#45)

Update the project metadata to resolve a number of Heimdall checks:

  - Defining a META.d
  - Updating go (1.20)
  - Default CODEOWNERS
  - Branch protection rules (`main` and `release/*` where applicable)

Unrelated clean-up:

  - CI & Heimdall badges
  - update tsccr pins
  - ignore .idea
  - add dependabot

Related RELENG-639

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @hashicorp/release-engineering

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: gomod
+    directory:
+    schedule:
+      interval: weekly

.github/workflows/build.yml

@@ -28,7 +28,7 @@ jobs:
           # We override the default product name so that this test build
           # of the CLI doesn't take the place of the cli built by the action.
           product_name: actions-go-build-test-build
-          go_version: 1.18
+          go_version: '1.20'
           os: ${{ matrix.os }}
           arch: ${{ matrix.arch }}
           instructions: go build -o $BIN_PATH -trimpath -buildvcs=false

.github/workflows/example-matrix.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           product_name: example-app
           product_version: 1.2.3
-          go_version: 1.18
+          go_version: 1.20
           os: ${{ matrix.os }}
           arch: ${{ matrix.arch }}
           instructions: |-

.github/workflows/example.yml

@@ -8,7 +8,7 @@ jobs:
       - name: Build
         uses: hashicorp/actions-go-build@main
         with:
-          go_version: 1.18
+          go_version: 1.20
           os: linux
           arch: amd64
           work_dir: testdata/example-app

.github/workflows/test.yml

@@ -14,13 +14,13 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: github/super-linter@v4
+      - uses: github/super-linter@45fc0d88288beee4701c62761281edfee85655d7 # v5.0.0
 
   go-tests:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       - uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
         with:
-          go-version: 1.18
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
+          go-version-file: go.mod
       - run: make test/go

.gitignore

@@ -3,3 +3,4 @@ dist/
 out/
 meta/
 actions-go-build
+.idea/

META.d/README.md

@@ -0,0 +1,3 @@
+# Reliability Data Platform Information
+
+These documents are meant to feed [heimdall](https://heimdall.hashicorp.services/site/), the Reliability Data Platform. A detailed breakdown of the schema can be found [here](https://github.com/hashicorp/core-sre-heimdall-core/blob/main/docs/SCHEMA.md).

META.d/_summary.yaml

@@ -0,0 +1,11 @@
+schema: 1.1
+
+partition: internal-platform
+category: github-action
+
+summary:
+  name: actions-go-build
+  owner: team-rel-eng
+  description: Go build action, with built-in reproduciblity verification as part of Common Release Tooling (CRT).
+  visibility: external
+  auth_methods: none

META.d/links.yaml

@@ -0,0 +1,7 @@
+runbooks: []
+  # - name: runbook name
+  #   link: link to runbook
+
+other_links:
+  - name: Reproducible Builds RFC
+    link: hhttps://go.hashi.co/rfc/engsrv-084

META.d/tags.yaml

@@ -0,0 +1,4 @@
+tags:
+  family: github-actions
+  type: github-action
+  crt-compatible: true

README.md

@@ -1,4 +1,4 @@
-# Go Build Action
+# Go Build Action [![Heimdall](https://heimdall.hashicorp.services/api/v1/assets/actions-go-build/badge.svg?key=5c34743984c6ac17fabc3e68b7f6d34620de4e877ab1c529405ed7f4843147bf)](https://heimdall.hashicorp.services/site/assets/actions-go-build) [![CI](https://github.com/hashicorp/actions-go-build/actions/workflows/test.yml/badge.svg)](https://github.com/hashicorp/actions-go-build/actions/workflows/test.yml)
 
 _**Build and package a (reproducible) Go binary.**_