Add QualityMax CI/CD Integration (Go test)

[qualitymaxapp]

QualityMax CI/CD Integration

This PR adds a GitHub Actions workflow that runs Go test tests on every push and pull request, then reports results back to QualityMax.

What's Included

• .github/workflows/qamax-go.yml — Workflow file for running tests

Configuration

• Framework: Go test
• Test Suite: all
• Triggers: push, pull_request

Next Steps

After merging this PR:

1. Go to your repository Settings → Secrets and variables → Actions
2. Add a new secret: QAMAX_API_KEY with your API key
3. (Optional) Add a variable: QAMAX_PROJECT_ID with the project ID 165

Tests will then run automatically on push and pull requests!

---

Generated by QualityMax

[qualitymaxapp]

⚠️ QualityMax Diff Analysis — WARN

API key exposure risk and missing error handling in test reporting workflow.

Severity	Category	File	Description	Suggestion
🟡 warning	security	.github/workflows/qamax-go.yml:125	API key is passed directly in curl command via -d flag with JSON payload. If the request fails or is logged, the API key could be exposed in error messages or logs.	Use curl's -H flag to pass the API key as a header instead, or ensure sensitive data is masked in logs. Consider using GitHub's built-in secret masking by avoiding direct string interpolation in commands.
🟡 warning	logic	.github/workflows/qamax-go.yml:130	QualityMax reporting failure only generates a warning but doesn't fail the workflow. If the external service is critical for compliance/tracking, a silent failure could mask issues.	Consider whether QualityMax reporting should fail the workflow (use 'exit 1') or if a warning is intentional. Document the decision in a comment.
🔵 info	logic	.github/workflows/qamax-go.yml:49	Using 'check-latest: true' for Go version may cause unexpected behavior changes if a new Go patch version is released during the workflow run.	Consider removing 'check-latest: true' or pinning to a specific patch version (e.g., '1.22.0') for reproducibility.

_{Analyzed commit 95f07d0b with claude-haiku-4-5-20251001 (1 files, 2314 tokens)}

[qualitymaxapp]

✅ QualityMax Pipeline

Gate	Result
🔍 AI Review	⚠️ 2 warning(s)
🧪 Repo Tests	✅ 222/259 passed (go)

_{Powered by QualityMax — AI-Powered Test Automation}