Added CodeQL

.github/workflows/ci.yml

@@ -40,11 +40,23 @@ jobs:
       - name: Install goveralls
         run: go install github.com/mattn/goveralls@latest
 
+      - name: Install Syft
+        uses: anchore/sbom-action/[email protected]
+
       - name: Test
         run: |
           mkdir -p var
           go test -v -race -covermode atomic "-coverprofile=var/profile.cov" ./...
 
+      - name: GoReleaser
+        uses: goreleaser/goreleaser-action@v6
+        with:
+          distribution: goreleaser
+          version: "~> v2"
+          args: build --snapshot --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Send coverage
         if: false
         env:

.github/workflows/release.yml

@@ -17,6 +17,9 @@ jobs:
       - name: Install Ubuntu dependencies
         run: sudo apt install libpam0g-dev
 
+      - name: Install Syft
+        uses: anchore/sbom-action/[email protected]
+
       - name: Checkout code
         uses: actions/checkout@v4
         with: