release: sync main with develop

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,33 @@
+---
+name: Bug report
+about: Something isn't working as expected
+title: ""
+labels: bug
+---
+
+## What happened
+
+A clear description of the bug.
+
+## Steps to reproduce
+
+1. `mctf ...`
+2. ...
+
+## Expected vs actual
+
+- Expected:
+- Actual:
+
+## Environment
+
+- `mctf version` output:
+- OS / arch:
+- Deploy mode (docker / ssh / kubernetes), if relevant:
+- Docker / kubectl version, if relevant:
+
+## Logs
+
+```
+paste relevant output (redact any tokens)
+```

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Security vulnerability
+    url: https://github.com/MicroClub-USTHB/mctf-cli/security/advisories/new
+    about: Please report security issues privately — see SECURITY.md, not a public issue.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,24 @@
+---
+name: Feature request
+about: Propose a new capability or improvement
+title: ""
+labels: enhancement
+---
+
+## Problem / motivation
+
+What are you trying to do that MCTF doesn't support today, and why?
+
+## Proposed solution
+
+What should the command / config / behavior look like? Include an example
+invocation or config snippet if you can.
+
+## Alternatives considered
+
+Other approaches, and why this one.
+
+## Scope
+
+- Which area? (build / deploy / instancer / platform / monitoring / plugins / docs / …)
+- Rough size, if known.

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,26 @@
+## What
+
+Brief description of the change and why.
+
+Closes #
+
+## How
+
+Key implementation points / decisions.
+
+## Verification
+
+- [ ] `go build ./...`
+- [ ] `go test ./...`
+- [ ] `golangci-lint run ./...`
+- [ ] `mctf generate --check` on the sample event (if derived files could change)
+- [ ] Docs updated (`docs/spec/`, CHANGELOG) if behavior/CLI changed
+- [ ] Schema + `make schemas` synced (if on-disk shape changed)
+
+## Notes
+
+Anything reviewers should know (follow-ups, out-of-scope, risks).
+
+---
+
+<!-- PRs target `develop`, not `main`. One concern per PR — see CONTRIBUTING.md. -->

.github/workflows/ci.yml

@@ -2,9 +2,9 @@ name: ci
 
 on:
   push:
-    branches: [main, production]
+    branches: [main, develop, production]
   pull_request:
-    branches: [main, production]
+    branches: [main, develop, production]
 
 jobs:
   lint:

.github/workflows/release.yml

@@ -0,0 +1,38 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: write # create the GitHub release + upload artifacts
+  packages: write # push the Docker image to GHCR
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # full history for the changelog
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.23"
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: goreleaser/goreleaser-action@v6
+        with:
+          version: "~> v2"
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # Optional: set this secret (write access to MicroClub-USTHB/homebrew-tap)
+          # to publish the Homebrew cask. Without it the cask push is skipped.
+          HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}

.gitignore

@@ -21,3 +21,9 @@ Thumbs.db
 /dist/
 *.test
 *.out
+
+# goreleaser build output
+dist/
+
+# generated man pages (built at release time)
+manpages/

.goreleaser.yaml

@@ -0,0 +1,109 @@
+# goreleaser configuration for the mctf CLI.
+# Cuts cross-platform binaries, archives, checksums, Linux packages, and a
+# Homebrew formula on every `vX.Y.Z` tag. Run `goreleaser check` to validate
+# and `goreleaser release --snapshot --clean` for a dry run.
+version: 2
+
+project_name: mctf
+
+# Generate man pages before building so the archives can bundle them.
+before:
+  hooks:
+    - sh -c 'mkdir -p manpages && go run . gen-man manpages'
+
+builds:
+  - id: mctf
+    main: .
+    binary: mctf
+    env:
+      - CGO_ENABLED=0
+    goos: [linux, darwin, windows]
+    goarch: [amd64, arm64]
+    # Match the Makefile's ldflags: version/commit/date live in package cmd.
+    ldflags:
+      - -s -w
+      - -X github.com/MicroClub-USTHB/mctf-cli/cmd.version={{ .Version }}
+      - -X github.com/MicroClub-USTHB/mctf-cli/cmd.commit={{ .ShortCommit }}
+      - -X github.com/MicroClub-USTHB/mctf-cli/cmd.date={{ .Date }}
+
+archives:
+  - id: mctf
+    formats: [tar.gz]
+    name_template: >-
+      {{ .ProjectName }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}
+    format_overrides:
+      - goos: windows
+        formats: [zip]
+    files:
+      - src: manpages/*.1
+        dst: man
+        info:
+          mode: 0644
+
+checksum:
+  name_template: checksums.txt
+
+# Docker image of the CLI itself, pushed to GHCR (for CI pipelines).
+# amd64 only for now; multi-arch can follow with buildx + docker_manifests.
+dockers:
+  - image_templates:
+      - "ghcr.io/microclub-usthb/mctf:{{ .Version }}"
+      - "ghcr.io/microclub-usthb/mctf:latest"
+    dockerfile: Dockerfile
+    goos: linux
+    goarch: amd64
+    build_flag_templates:
+      - "--label=org.opencontainers.image.title=mctf"
+      - "--label=org.opencontainers.image.version={{ .Version }}"
+      - "--label=org.opencontainers.image.revision={{ .FullCommit }}"
+      - "--label=org.opencontainers.image.source=https://github.com/MicroClub-USTHB/mctf-cli"
+      - "--label=org.opencontainers.image.licenses=MIT"
+
+# Linux packages (.deb / .rpm) attached to the release.
+nfpms:
+  - id: mctf
+    package_name: mctf
+    maintainer: MicroClub-USTHB <https://github.com/MicroClub-USTHB>
+    description: MCTF — Modern CTF Framework CLI
+    license: MIT
+    homepage: https://github.com/MicroClub-USTHB/mctf-cli
+    formats: [deb, rpm]
+    contents:
+      - src: manpages/*.1
+        dst: /usr/share/man/man1
+
+# Homebrew cask pushed to MicroClub-USTHB/homebrew-tap (installs the binary).
+# Requires a HOMEBREW_TAP_TOKEN secret with write access to that repo.
+homebrew_casks:
+  - name: mctf
+    # Skip the tap push until HOMEBREW_TAP_TOKEN is configured, so a release
+    # still succeeds (binaries/packages publish) before the tap is set up.
+    skip_upload: "{{ if .Env.HOMEBREW_TAP_TOKEN }}false{{ else }}true{{ end }}"
+    repository:
+      owner: MicroClub-USTHB
+      name: homebrew-tap
+      token: "{{ .Env.HOMEBREW_TAP_TOKEN }}"
+    homepage: https://github.com/MicroClub-USTHB/mctf-cli
+    description: MCTF — Modern CTF Framework CLI
+    # Strip the quarantine attribute so the unsigned binary runs on macOS.
+    hooks:
+      post:
+        install: |
+          if system_command("/usr/bin/xattr", args: ["-h"]).exit_status == 0
+            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/mctf"]
+          end
+
+changelog:
+  use: git
+  sort: asc
+  filters:
+    exclude:
+      - "^docs:"
+      - "^test:"
+      - "^chore:"
+      - "^ci:"
+      - "Merge pull request"
+
+release:
+  draft: false
+  prerelease: auto

CODE_OF_CONDUCT.md

@@ -0,0 +1,57 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, religion, or sexual identity and
+orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes
+- Focusing on what is best for the overall community
+
+Examples of unacceptable behavior:
+
+- The use of sexualized language or imagery, and sexual attention or advances
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information without explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards and
+will take appropriate and fair corrective action in response to any behavior
+that they deem inappropriate, threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders at [MicroClub USTHB](https://github.com/MicroClub-USTHB).
+All complaints will be reviewed and investigated promptly and fairly.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.1, available at
+<https://www.contributor-covenant.org/version/2/1/code_of_conduct.html>.
+
+[homepage]: https://www.contributor-covenant.org