🌱 Bump github/codeql-action from 2.21.4 to 2.21.5 #1354

	name: CI-Tests
	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	permissions: read-all

	jobs:
	unit-tests:
	name: Run unit tests
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ ubuntu-latest ]
	permissions:
	id-token: write # Needed to pick up on signing with a GitHub workflow identity.
	steps:
	- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
	- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
	with:
	go-version-file: go.mod
	cache: true
	- name: Run Go tests
	# cannot run tests with race because we are mutating state (setting ENV variables)
	run: GITHUB_AUTH_TOKEN=${{ secrets.GITHUB_TOKEN }} go test -covermode=atomic -coverprofile=unit-coverage.out ./...
	- name: Upload codecoverage
	uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
	with:
	files: ./unit-coverage.out
	verbose: true

	verify:
	name: Run verify
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ ubuntu-latest ]
	steps:
	- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
	- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
	with:
	go-version-file: go.mod
	cache: true
	- name: Run Go verify
	run: \|
	go mod tidy && go mod verify
	git diff --exit-code

Provide feedback