fix: update workflow

Author: sakulstra

.github/workflows/comment.yml

@@ -2,12 +2,22 @@ name: PR Comment
 
 on:
   workflow_run:
+    # The workflow generating the artifacts
     workflows: [Test]
     types:
       - completed
 
+permissions:
+  actions: read
+  issues: write
+  checks: read
+  statuses: read
+  pull-requests: write
+
 jobs:
   comment:
     uses: bgd-labs/github-workflows/.github/workflows/comment.yml@main
     secrets:
+      # the provided PAT needs write and write permissions on issues and pull requests
+      # the PAT is only really needed when commenting of prs from forks
       READ_ONLY_PAT: ${{ secrets.READ_ONLY_PAT }}

.github/workflows/test.yml

@@ -1,59 +1,20 @@
 name: Test
 
 concurrency:
-  group: ${{ github.head_ref || github.run_id }}
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
 on:
   pull_request:
   push:
-    branches:
-      - main
+    branches: [main]
+
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Run Foundry setup
-        uses: bgd-labs/github-workflows/.github/actions/foundry-setup@main
-
-      - name: Enforce linting
-        run: forge fmt --check
-
-  test-sol:
-    name: Foundry build n test
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          submodules: recursive
-
-      - uses: bgd-labs/action-rpc-env@main
-        with:
-          ALCHEMY_API_KEY: ${{ secrets.ALCHEMY_API_KEY }}
-
-      # we simply use foundry zk for all jobs in this repo
-      - name: Run Foundry setup
-        uses: bgd-labs/github-workflows/.github/actions/foundry-setup@main
-
-      - name: Run Forge tests
-        id: test
-        uses: bgd-labs/github-workflows/.github/actions/foundry-test@main
-
-      - name: Run Gas report
-        uses: bgd-labs/github-workflows/.github/actions/foundry-gas-report@main
-
-      - name: Run Lcov report
-        uses: bgd-labs/github-workflows/.github/actions/foundry-lcov-report@main
-
-      - name: Store artifact
-        uses: bgd-labs/github-workflows/.github/actions/comment-artifact@main
-
-      # we let failing tests pass so we can log them in the comment, still we want the ci to fail
-      - name: Post test
-        if: ${{ steps.test.outputs.testStatus != 0 || steps.zktest.outputs.testStatus != 0 }}
-        run: |
-          echo "tests failed"
-          exit 1
+    uses: bgd-labs/github-workflows/.github/workflows/foundry-lint.yml@main
+  test:
+    uses: bgd-labs/github-workflows/.github/workflows/foundry-test.yml@main