Cvereporting #220

	---
	name: CI
	on:
	pull_request:
	branches:
	- main
	- 'v*'
	permissions:
	contents: read

	jobs:
	zizmor:
	name: Run zizmor
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- uses: GitHubSecurityLab/actions-permissions/monitor@bf82d13b9b10051d224345ab9184f5ede0a94289 # v1.0.2-beta9
	with:
	config: ${{ vars.PERMISSIONS_CONFIG }}

	- name: Check out repository
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3

	test:
	name: PR test
	runs-on: ubuntu-latest
	timeout-minutes: 30
	steps:
	- uses: GitHubSecurityLab/actions-permissions/monitor@bf82d13b9b10051d224345ab9184f5ede0a94289 # v1.0.2-beta9
	with:
	config: ${{ vars.PERMISSIONS_CONFIG }}

	- name: Checkout code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	lfs: true
	persist-credentials: false

	- name: Install Go
	uses: ./.github/actions/setup-go

	- name: Lint GitHub Actions
	run: go tool github.com/rhysd/actionlint/cmd/actionlint

	- name: golangci-lint
	uses: golangci/golangci-lint-action@2d7e7b678591ee3321638e5c5621ca689628daa4
	with:
	version: latest
	args: '--config=.golangci.yaml -v'

	- name: Test
	run: go test ./...

Provide feedback