Add version tag and repo link to web UI footer

Version is injected at build time via ldflags and displayed in the
footer alongside a link to the GitHub repository.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: danielewood

.github/workflows/deploy-pages.yml

@@ -21,7 +21,7 @@ jobs:
           cache: true
 
       - name: Build WASM
-        run: make wasm
+        run: make wasm VERSION=${GITHUB_REF_NAME}
 
       - name: Deploy to Cloudflare Pages
         uses: cloudflare/wrangler-action@v3

CHANGELOG.md

@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add certificate trust validation against embedded Mozilla root store in WASM UI
 - Add selectable export: checkboxes to choose which matched bundles to include in ZIP
 - Add UI filters: hide expired, unmatched, non-leaf, and untrusted certificates
+- Show version tag and GitHub repo link in web UI footer
 
 ## [0.6.0] - 2026-02-14
 

Makefile

@@ -9,8 +9,11 @@ test:
 vet:
 	go vet ./...
 
+VERSION ?= $(shell git describe --tags --always --dirty 2>/dev/null || echo dev)
+
 wasm:
-	GOOS=js GOARCH=wasm go build -trimpath -ldflags="-s -w" \
+	GOOS=js GOARCH=wasm go build -trimpath \
+		-ldflags="-s -w -X main.version=$(VERSION)" \
 		-o web/public/certkit.wasm ./cmd/wasm/
 	cp "$$(go env GOROOT)/lib/wasm/wasm_exec.js" web/public/wasm_exec.js
 

cmd/wasm/main.go

@@ -17,6 +17,9 @@ import (
 	"github.com/sensiblebit/certkit"
 )
 
+// version is set at build time via -ldflags "-X main.version=v0.6.1".
+var version = "dev"
+
 // mozillaRoots is a lazily-initialized Mozilla root certificate pool.
 var mozillaRoots *x509.CertPool
 
@@ -32,6 +35,7 @@ func getMozillaRoots() *x509.CertPool {
 var globalStore = newStore()
 
 func main() {
+	js.Global().Set("certkitVersion", version)
 	js.Global().Set("certkitAddFiles", js.FuncOf(addFiles))
 	js.Global().Set("certkitGetState", js.FuncOf(getState))
 	js.Global().Set("certkitExportBundles", js.FuncOf(exportBundlesJS))

web/public/app.js

@@ -74,6 +74,12 @@ async function loadWasm() {
     go.run(result.instance);
     wasmReady = true;
     hideStatus();
+
+    // Show version from WASM build.
+    const v = window.certkitVersion;
+    if (v && v !== "dev") {
+        document.getElementById("version").textContent = v;
+    }
 }
 
 loadWasm().catch((err) => {

web/public/index.html

@@ -99,7 +99,7 @@ <h3>Warnings</h3>
     </main>
 
     <footer>
-        <p>certkit — All processing happens locally in your browser. No files are uploaded.</p>
+        <p><a href="https://github.com/sensiblebit/certkit">certkit</a> <span id="version"></span> — All processing happens locally in your browser. No files are uploaded.</p>
     </footer>
 
     <script src="wasm_exec.js"></script>

web/public/style.css

@@ -348,6 +348,15 @@ footer {
     font-size: 0.75rem;
 }
 
+footer a {
+    color: var(--fg-secondary);
+    text-decoration: underline;
+}
+
+footer a:hover {
+    color: var(--accent);
+}
+
 @media (max-width: 640px) {
     body {
         padding: 1rem;