build: add make targets for build test and install #8

	name: Security

	on:
	pull_request:
	push:
	branches:
	- main
	schedule:
	- cron: "23 4 * * 1"
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: security-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	dependency-review:
	name: Dependency Review
	if: github.event_name == 'pull_request'
	runs-on: ubuntu-latest
	timeout-minutes: 10
	permissions:
	contents: read

	steps:
	- name: Checkout repository
	uses: actions/checkout@v6
	with:
	persist-credentials: false

	- name: Review dependencies
	uses: actions/dependency-review-action@v4
	with:
	fail-on-severity: moderate
	license-check: false

	govulncheck:
	name: Govulncheck
	runs-on: ubuntu-latest
	timeout-minutes: 15
	permissions:
	contents: read

	steps:
	- name: Run govulncheck
	uses: golang/govulncheck-action@v1
	with:
	go-version-file: go.mod
	go-package: ./...

	codeql:
	name: CodeQL
	runs-on: ubuntu-latest
	timeout-minutes: 20
	permissions:
	actions: read
	contents: read
	security-events: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@v6
	with:
	persist-credentials: false

	- name: Set up Go
	uses: actions/setup-go@v6
	with:
	go-version-file: go.mod

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v4
	with:
	languages: go
	build-mode: manual

	- name: Build for analysis
	run: go build ./...

	- name: Analyze
	uses: github/codeql-action/analyze@v4

Provide feedback