name: ci

on:
  push:
    branches:
      - master
      - "codex/**"
  pull_request:

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: jdx/mise-action@v2

      - name: Install build tooling
        run: sudo apt-get update && sudo apt-get install -y build-essential

      - name: Run core checks
        run: mise run ci

      - name: Run govulncheck
        run: mise run vulncheck

      - name: Build container
        run: mise run docker-build