Repository navigation

feat: run-script AWS role, SSH key and uv cache, and fix its pre-commit cache #53

	name: CI

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main

	permissions: {}

	jobs:
	Lint:
	permissions:
	contents: read
	uses: ./.github/workflows/run-script.yml
	secrets:
	STEP_SECURITY_API_KEY: ${{ secrets.STEP_SECURITY_API_KEY }}
	with:
	pre-commit-cache: true
	# zizmor's online audits skip silently without a token, and its summary
	# line reads the same either way, so CI would pass while the supply-chain
	# audits never ran.
	github-token: true
	run: \|
	just lint

	Tests:
	permissions:
	contents: read
	uses: ./.github/workflows/run-script.yml
	secrets:
	STEP_SECURITY_API_KEY: ${{ secrets.STEP_SECURITY_API_KEY }}
	with:
	run: \|
	just test