🌱 Bump the github-actions group across 1 directory with 6 updates #1748

	name: CI-Tests
	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	permissions: read-all

	jobs:
	unit-tests:
	name: Run unit tests
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ ubuntu-latest ]
	permissions:
	id-token: write # Needed to pick up on signing with a GitHub workflow identity.
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
	with:
	go-version-file: go.mod
	cache: true
	- name: Run Go tests
	# cannot run tests with race because we are mutating state (setting ENV variables)
	run: GITHUB_AUTH_TOKEN=${{ secrets.GITHUB_TOKEN }} go test -covermode=atomic -coverprofile=unit-coverage.out ./...
	- name: Upload codecoverage
	uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6
	with:
	files: ./unit-coverage.out
	verbose: true

	verify:
	name: Run verify
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ ubuntu-latest ]
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
	with:
	go-version-file: go.mod
	cache: true
	- name: Run Go verify
	run: \|
	go mod tidy && go mod verify
	git diff --exit-code

Provide feedback