Repository navigation

fix(ci): repair workflow security checks from issue 96 #255

	# SPDX-License-Identifier: MPL-2.0
	# This workflow is managed by gh actions-lock.
	name: Quality Gates
	permissions:
	actions: read
	contents: read
	on:
	pull_request:
	push:
	branches:
	- main
	jobs:
	must-gates:
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	- name: Install system dependencies
	run: \|
	sudo apt-get update
	sudo apt-get install -y just gnat gprbuild ripgrep
	- name: Run must invariants
	run: ./scripts/run-must-gates.sh
	- name: Verify trust manifests
	run: ./scripts/trust/verify-manifest.sh
	test-all:
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	- name: Install Rust toolchain
	# Pin the action independently of the requested Rust toolchain.
	uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # v1
	with:
	toolchain: stable
	- name: Install system dependencies
	run: \|
	sudo apt-get update
	sudo apt-get install -y just gnat gprbuild
	- name: Run unified test gate
	run: just test-all