Add pinact and zizmor workflow checks #24

	name: Run Tests

	on: [ push ]

	jobs:
	test:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- uses: hashicorp/setup-terraform@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 # v4.0.0
	with:
	terraform_version: 1.4.6
	terraform_wrapper: false

	- name: Set up Go
	uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
	with:
	go-version-file: 'go.mod'

	- name: golangci-lint
	uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
	with:
	args: --issues-exit-code=0 --timeout=5m

	# - name: Run tests
	# run: go test -race -coverprofile=coverage.out -covermode=atomic -coverpkg=./... -v ./...
	# env:
	# TF_ACC: 1

	- name: Upload to codecov
	uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
	with:
	verbose: true

	changie:
	runs-on: ubuntu-latest
	needs: test
	if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
	permissions:
	contents: write
	pull-requests: write
	actions: write
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	fetch-depth: 0

	- name: Prepare release
	uses: labd/changie-release-action@1299f6ba27a50b2f2beb09d73bcbdc1d87a415f4 # v0.6.1
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	release-workflow: 'release.yaml'

Provide feedback