Add Security checks to plugin repo category #1678

	name: PHP Code Linting

	on:
	push:
	branches:
	- trunk
	- 'release/**'
	# Only run if PHP-related files changed.
	paths:
	- '.github/workflows/php-lint.yml'
	- '**.php'
	- 'phpcs.xml.dist'
	- 'composer.json'
	- 'composer.lock'
	pull_request:
	branches:
	- trunk
	- 'release/**'
	- 'feature/**'
	# Only run if PHP-related files changed.
	paths:
	- '.github/workflows/php-lint.yml'
	- '**.php'
	- 'phpcs.xml.dist'
	- 'composer.json'
	- 'composer.lock'
	types:
	- opened
	- reopened
	- synchronize

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

	jobs:
	php-lint:
	name: PHP
	runs-on: ubuntu-latest
	timeout-minutes: 20
	steps:
	- uses: actions/checkout@v4

	- uses: shivammathur/setup-php@v2
	with:
	php-version: '8.0'

	- name: Validate Composer configuration
	run: composer validate

	- name: Install PHP dependencies
	uses: ramsey/composer-install@57532f8be5bda426838819c5ee9afb8af389d51a
	with:
	composer-options: '--prefer-dist'

	- name: PHP Lint
	run: composer lint

	- name: PHPStan
	run: composer phpstan

	- name: PHPMD
	run: composer phpmd

Provide feedback