Add contributing guidelines to prevent seed.json PRs (#1079) #1954

	name: CI Pipeline

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	permissions:
	contents: read

	jobs:
	# Build, Lint, and Validate
	build-lint-validate:
	name: Build, Lint, and Validate
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8

	- name: Set up Go
	uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417
	with:
	go-version-file: 'go.mod'
	cache: true

	- name: Run lint
	uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20
	with:
	version: v2.4.0

	- name: Validate schemas and examples
	run: make validate

	- name: Build application
	run: make build

	- name: Run govulncheck
	uses: golang/govulncheck-action@v1
	with:
	# Use Go 1.26.1 to pick up crypto/x509 vulnerability fixes (GO-2026-4600, GO-2026-4599).
	# go.mod stays at go 1.25.8 for golangci-lint compatibility until it supports Go 1.26.
	go-version-input: '1.26.1'
	go-package: ./...
	repo-checkout: false

	# All Tests
	tests:
	name: Tests
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8

	- name: Set up Go
	uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417
	with:
	go-version-file: 'go.mod'
	cache: true

	- name: Set up ko
	uses: ko-build/setup-ko@v0.9

	- name: Run all tests
	run: make test-all

	- name: Upload coverage artifacts
	uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
	with:
	name: coverage-report
	path: \|
	coverage.out
	coverage.html

Provide feedback