1on:
 2  pull_request:
 3    branches:
 4      - main
 5
 6jobs:
 7  CI:
 8    runs-on: ubuntu-latest
 9
10    permissions:
11      contents: read
12      pull-requests: write
13
14    steps:
15      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
16        with:
17          persist-credentials: false
18      - name: Validate CUE schemas
19        uses: ./.github/actions/validate-cue
20      - name: Validate the security-insights file
21        run: make lintinsights
22      - name: Setup Go
23        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e
24        with:
25          go-version: stable
26      - name: Run Schema Test
27        run: make test