Fix/chainrisk lens go cache

.github/workflows/ci.yml

@@ -0,0 +1,51 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+      - "feat/**"
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Test, Vet and Build
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          cache: true
+          cache-dependency-path: go.mod
+
+      - name: Check formatting
+        run: |
+          files=$(gofmt -l .)
+          if [ -n "$files" ]; then
+            echo "The following Go files need formatting:"
+            echo "$files"
+            exit 1
+          fi
+
+      - name: Run tests
+        run: go test ./...
+
+      - name: Run static analysis
+        run: go vet ./...
+
+      - name: Build
+        run: go build ./...

cmd/chainrisk-lens/main.go

@@ -11,11 +11,11 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/agent"
-	"github.com/jijo-OO7/chainrisk-lens/internal/analysis"
-	"github.com/jijo-OO7/chainrisk-lens/internal/graph"
-	"github.com/jijo-OO7/chainrisk-lens/internal/investigation"
-	"github.com/jijo-OO7/chainrisk-lens/internal/sbom"
+	"github.com/Chain-Risk/chainrisk-lens/internal/agent"
+	"github.com/Chain-Risk/chainrisk-lens/internal/analysis"
+	"github.com/Chain-Risk/chainrisk-lens/internal/graph"
+	"github.com/Chain-Risk/chainrisk-lens/internal/investigation"
+	"github.com/Chain-Risk/chainrisk-lens/internal/sbom"
 )
 
 const (

cmd/chainrisk-lens/main_test.go

@@ -11,11 +11,11 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/agent"
-	"github.com/jijo-OO7/chainrisk-lens/internal/analysis"
-	"github.com/jijo-OO7/chainrisk-lens/internal/graph"
-	"github.com/jijo-OO7/chainrisk-lens/internal/investigation"
-	"github.com/jijo-OO7/chainrisk-lens/internal/sbom"
+	"github.com/Chain-Risk/chainrisk-lens/internal/agent"
+	"github.com/Chain-Risk/chainrisk-lens/internal/analysis"
+	"github.com/Chain-Risk/chainrisk-lens/internal/graph"
+	"github.com/Chain-Risk/chainrisk-lens/internal/investigation"
+	"github.com/Chain-Risk/chainrisk-lens/internal/sbom"
 )
 
 type fakeInvestigator struct {
@@ -650,13 +650,25 @@ func fakeInvestigationResult() investigation.Result {
 func writeSBOM(t *testing.T, document sbom.SBOM) string {
 	t.Helper()
 
-	data, err := json.Marshal(document)
+	fixture := struct {
+		BOMFormat    string            `json:"bomFormat"`
+		Components   []sbom.Component  `json:"components"`
+		Dependencies []sbom.Dependency `json:"dependencies"`
+	}{
+		BOMFormat:    "CycloneDX",
+		Components:   document.Components,
+		Dependencies: document.Dependencies,
+	}
+
+	data, err := json.Marshal(fixture)
 	if err != nil {
 		t.Fatal(err)
 	}
+
 	path := filepath.Join(t.TempDir(), "sbom.json")
 	if err := os.WriteFile(path, data, 0o600); err != nil {
 		t.Fatal(err)
 	}
+
 	return path
 }

cmd/chainrisk-lens/setup.go

@@ -14,7 +14,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/agent"
+	"github.com/Chain-Risk/chainrisk-lens/internal/agent"
 )
 
 const (

cmd/chainrisk-lens/setup_test.go

@@ -9,9 +9,9 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/agent"
-	"github.com/jijo-OO7/chainrisk-lens/internal/investigation"
-	"github.com/jijo-OO7/chainrisk-lens/internal/sbom"
+	"github.com/Chain-Risk/chainrisk-lens/internal/agent"
+	"github.com/Chain-Risk/chainrisk-lens/internal/investigation"
+	"github.com/Chain-Risk/chainrisk-lens/internal/sbom"
 )
 
 func TestDetectSetupStatusPlatformAndWSL(t *testing.T) {

go.mod

@@ -1,3 +1,3 @@
-module github.com/jijo-OO7/chainrisk-lens
+module github.com/Chain-Risk/chainrisk-lens
 
 go 1.25.0

internal/agent/investigator.go

@@ -9,7 +9,7 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/investigation"
+	"github.com/Chain-Risk/chainrisk-lens/internal/investigation"
 )
 
 // Model generates a response from a prompt. Runtime and provider details belong

internal/agent/investigator_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/investigation"
+	"github.com/Chain-Risk/chainrisk-lens/internal/investigation"
 )
 
 type fakeModel struct {

internal/analysis/analysis.go

@@ -5,7 +5,7 @@ import (
 	"fmt"
 	"sort"
 
-	dependencygraph "github.com/jijo-OO7/chainrisk-lens/internal/graph"
+	dependencygraph "github.com/Chain-Risk/chainrisk-lens/internal/graph"
 )
 
 // ErrTargetNotFound indicates that the requested target is not in the graph.

internal/analysis/analysis_test.go

@@ -5,8 +5,8 @@ import (
 	"reflect"
 	"testing"
 
-	dependencygraph "github.com/jijo-OO7/chainrisk-lens/internal/graph"
-	"github.com/jijo-OO7/chainrisk-lens/internal/sbom"
+	dependencygraph "github.com/Chain-Risk/chainrisk-lens/internal/graph"
+	"github.com/Chain-Risk/chainrisk-lens/internal/sbom"
 )
 
 type propagationEdge struct {

internal/graph/graph.go

@@ -4,7 +4,7 @@ import (
 	"fmt"
 	"sort"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/sbom"
+	"github.com/Chain-Risk/chainrisk-lens/internal/sbom"
 )
 
 // Node is a component in the dependency graph.

internal/graph/graph_test.go

@@ -5,7 +5,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/sbom"
+	"github.com/Chain-Risk/chainrisk-lens/internal/sbom"
 )
 
 func TestGraphCases(t *testing.T) {

internal/investigation/investigation.go

@@ -6,8 +6,8 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/jijo-OO7/chainrisk-lens/internal/analysis"
-	"github.com/jijo-OO7/chainrisk-lens/internal/graph"
+	"github.com/Chain-Risk/chainrisk-lens/internal/analysis"
+	"github.com/Chain-Risk/chainrisk-lens/internal/graph"
 )
 
 // Component is component metadata included in deterministic evidence.