Test

build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.4 #25

	name: Test

	on:
	pull_request:
	branches:
	- master

	permissions: read-all

	jobs:
	test:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	go-version: ['1.24.3']
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
	with:
	egress-policy: audit

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Go
	uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
	with:
	go-version: ${{ matrix.go-version }}
	cache: true

	- name: Display Go version
	run: go version

	- name: Set up golangci-lint
	uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
	with:
	version: v2.1

	- name: Run linting
	run: make lint

	- name: Run tests
	run: make test

	- name: Run audit checks
	run: make audit

	- name: Verify build
	run: make build

	- name: Upload coverage
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	with:
	name: coverage-${{ matrix.go-version }}
	path: coverage.html

Provide feedback