chore: org migration and workflow standardization #11

	name: CI

	on:
	push:
	branches: [ main, master ]
	pull_request:
	branches: [ main, master ]

	jobs:
	test:
	name: Test
	runs-on: ubuntu-latest
	strategy:
	matrix:
	go-version: ['1.24', '1.25']
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: ${{ matrix.go-version }}

	- name: Test
	run: make test

	lint:
	name: Lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.25'

	- name: golangci-lint
	uses: golangci/golangci-lint-action@v7
	with:
	version: v2.7.2
	args: --config=.golangci.yml --timeout=5m

	security:
	name: Security
	runs-on: ubuntu-latest
	permissions:
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.25'

	- name: Run Gosec
	uses: securego/gosec@master
	with:
	args: '-fmt sarif -out gosec-results.sarif --no-fail ./...'

	- name: Upload SARIF
	uses: github/codeql-action/upload-sarif@v3
	if: github.event_name != 'pull_request' \|\| github.event.pull_request.head.repo.full_name == github.repository
	continue-on-error: true
	with:
	sarif_file: gosec-results.sarif

	ci-complete:
	name: CI Complete
	needs: [test, lint, security]
	runs-on: ubuntu-latest
	steps:
	- run: echo "CI complete"

Provide feedback