chore(taskfile): new tasks for goda and go-size-analyzer

CLAUDE.md

@@ -67,6 +67,8 @@ everything.
 | Renovate dry-run | `task renovate:plan` | extracts deps + lists planned bumps without modifying files (debug `renovate.json5`) |
 | Renovate apply | `task renovate:patch` | applies the same bumps to the working tree, format-preserving, best-effort (skips ambiguous cases) |
 | Render chart README | `task doc:helm` | `dagger call helm-docs export --path=chart/README.md` |
+| Visualize package deps | `task analysis:graph` | `goda graph ./...` → `dot -Tsvg` → `xdg-open` (writes to `dist/graph.svg`) |
+| Inspect binary size | `task analysis:size` | builds the host-arch binary then opens `gsa --tui` on it |
 
 ## Dagger module architecture
 

CONTRIBUTING.md

@@ -630,6 +630,8 @@ releases.
 | `task renovate:patch` | Apply Renovate's planned bumps to the working tree (best-effort, format-preserving) |
 | `task doc` | Regenerate all documentation |
 | `task doc:helm` | Regenerate chart/README.md only (Dagger) |
+| `task analysis:graph` | Render & open the full package dependency graph (goda + graphviz) |
+| `task analysis:size` | Build the host-arch binary then explore its size with `gsa --tui` |
 
 ## Troubleshooting
 

Taskfile.yml

@@ -405,3 +405,21 @@ tasks:
     desc: Regenerate chart/README.md from values.yaml + .gotmpl
     cmds:
       - dagger call helm-docs export --path=chart/README.md
+
+  # ─── Analysis ────────────────────────────────────────────────────────────
+  analysis:graph:
+    desc: "Render & open the full package dependency graph (goda → graphviz → xdg-open)"
+    # Output sits under dist/ so it inherits the repo's "build outputs
+    # live in dist/" convention. Caveat: `task build` and
+    # `task image:*` use `goreleaser --clean`, which wipes dist/ —
+    # re-run this task if the SVG disappears.
+    cmds:
+      - mkdir -p dist
+      - goda graph ./... | dot -Tsvg > dist/graph.svg
+      - xdg-open dist/graph.svg 2>/dev/null || open dist/graph.svg 2>/dev/null || echo "Graph saved to dist/graph.svg — open it manually."
+
+  analysis:size:
+    desc: "Inspect host-arch binary size (gsa TUI, compact view) — builds first"
+    deps: [build]
+    cmds:
+      - gsa ./dist/x509-certificate-exporter --tui

flake.nix

@@ -69,6 +69,8 @@
             cosign
             rekor-cli
             goda
+            graphviz   # `dot`, used by `task analysis:graph` to render goda's DOT output
+            xdg-utils  # `xdg-open`, used by `task analysis:graph` to open the SVG
           ]);
         };
       });