feat: Refactor authorization checks to use game-scoped claims and add… #772

	name: Code Quality

	on:
	schedule:
	- cron: "0 3 * * 1"
	push:
	branches:
	- main
	pull_request:
	branches:
	- main
	types: [opened, synchronize, reopened, ready_for_review]

	permissions: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	quality:
	permissions:
	contents: read
	actions: read
	security-events: write
	if: github.event_name != 'pull_request' \|\| github.event.pull_request.draft == false
	uses: frasermolyneux/actions/.github/workflows/codequality.yml@main
	with:
	sonar-project-key: frasermolyneux_portal-web
	sonar-organization: frasermolyneux
	sonar-host-url: https://sonarcloud.io
	build-target: dotnet-web-ci
	dotnet-project: XtremeIdiots.Portal.Web
	dotnet-version: 9.0.x
	src-folder: src
	secrets:
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

	devops-secure-scanning:
	permissions:
	contents: read
	actions: read
	id-token: write
	security-events: write
	if: github.event_name != 'pull_request' \|\| github.event.pull_request.draft == false
	uses: frasermolyneux/actions/.github/workflows/devops-secure-scanning.yml@main

	dependency-review:
	permissions:
	contents: read
	pull-requests: write
	if: github.event_name == 'pull_request' && github.event.pull_request.draft == false
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v6
	- name: Dependency Review
	uses: actions/dependency-review-action@v5
	with:
	comment-summary-in-pr: always

Provide feedback