fix: enhance security and api compliance #81

	name: CI

	on:
	push:
	branches: [ master, main ]
	pull_request:
	branches: [ master, main ]

	jobs:
	test:
	name: Test
	runs-on: ubuntu-latest

	permissions:
	contents: read
	pull-requests: write

	strategy:
	matrix:
	go-version: ['1.21', '1.22', '1.23']

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: ${{ matrix.go-version }}

	- name: Get dependencies
	run: \|
	go get -v -t -d ./...
	go mod download
	go mod verify

	- name: Run gofmt check
	run: bash ./scripts/gofmt.sh

	- name: Run tests with coverage
	run: bash ./scripts/coverage.sh

	- name: Upload coverage to Coveralls
	if: matrix.go-version == '1.23'
	uses: coverallsapp/github-action@v2
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	file: ./coverage.out
	format: golang
	flag-name: go-${{ matrix.go-version }}

	lint:
	name: Lint
	runs-on: ubuntu-latest

	permissions:
	contents: read

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.23'

	- name: Run golangci-lint
	uses: golangci/golangci-lint-action@v4
	with:
	version: v1.61
	args: --timeout=5m

	security:
	name: Security Scan
	runs-on: ubuntu-latest

	permissions:
	contents: read
	security-events: write

	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.23'

	- name: Run Gosec Security Scanner
	uses: securego/gosec@v2.21.4
	with:
	args: '-no-fail -fmt sarif -out results.sarif ./...'

	- name: Upload SARIF file
	if: always()
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: results.sarif

Provide feedback