patch: go module updates and added contained version override support #9

	name: Build on Tag

	on:
	push:
	tags:
	- "v..*"
	workflow_dispatch:

	jobs:
	lint:
	name: Lint files
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v4
	with:
	go-version: '1.22.1'
	- name: golangci-lint
	uses: golangci/golangci-lint-action@v3
	with:
	version: latest
	skip-cache: true
	args: --timeout=30m

	test:
	name: Run tests
	runs-on: 'ubuntu-22.04'
	needs: lint
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v4
	with:
	go-version: '1.22.1'
	- run: go test -v -cover ./...

	security-checks:
	runs-on: ubuntu-22.04
	needs: test
	permissions:
	contents: read
	packages: write
	id-token: write
	steps:
	- name: Build Baski Image
	uses: drewbernetes/[email protected]
	if: github.event_name != 'pull_request'
	id: build-and-scan-baski
	with:
	image-repo: "registry.hudson-viles.uk/public"
	repo-username: ${{ secrets.REGISTRY_PUBLIC_USER }}
	repo-password: ${{ secrets.REGISTRY_PUBLIC_PASSWORD }}
	image-name: baski
	image-tag: ${{ github.ref_name }}
	check-severity: CRITICAL
	trivyignore-from-s3: true
	s3-endpoint: "https://api.s3.hudson-viles.uk/"
	s3-access-key: ${{secrets.S3_ACCESS_KEY}}
	s3-secret-key: ${{secrets.S3_SECRET_KEY}}
	s3-bucket: "trivyignores"
	s3-path: "baski"
	add-latest-tag: true
	publish-image: true
	cosign-private-key: ${{secrets.COSIGN_KEY}}
	cosign-password: ${{secrets.COSIGN_PASSWORD}}
	cosign-tlog: false
	dockerfile-path: docker

Provide feedback