fix: sigstore signing using oidc #3

	name: Tests

	# This GitHub action runs your tests for each pull request and push.
	# Optionally, you can turn it on using a schedule for regular testing.
	on:
	pull_request:
	branches: [ "main" ]
	paths-ignore:
	- 'README.md'
	push:
	branches: [ "main" ]
	paths-ignore:
	- 'README.md'

	# Testing only needs permissions to read the repository contents.
	permissions:
	contents: read

	jobs:
	# Ensure project builds before running testing matrix
	build:
	name: Build
	runs-on: ubuntu-latest
	timeout-minutes: 5
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
	with:
	go-version-file: 'go.mod'
	cache: true
	- run: go mod download
	- run: go build -v .
	- name: Run linters
	uses: golangci/golangci-lint-action@a4f60bb28d35aeee14e6880718e0c85ff1882e64 # v6.0.1
	with:
	version: latest

Provide feedback