Build

Bump web-auth/cose-lib from 4.5.0 to 4.5.1 in /lam #1856

	name: "Build"

	on:
	push:
	branches: [ develop ]
	pull_request:
	branches: [ develop ]

	permissions:
	contents: read

	jobs:
	build:

	permissions:
	contents: read # for actions/checkout to fetch code
	pull-requests: read # for sonarsource/sonarcloud-github-action to determine which PR to decorate
	runs-on: self-hosted

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df # v2.18.0
	with:
	egress-policy: audit

	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Setup PHP with PECL extension
	uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2
	with:
	php-version: '8.2'
	extensions: ldap, xdebug, gd, json, xml, curl, zip, mbstring, imagick, pdo_sqlite

	- name: Validate composer.json and composer.lock
	run: composer validate --strict

	- name: Cache Composer packages
	id: composer-cache
	uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
	with:
	path: vendor
	key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }}
	restore-keys: \|
	${{ runner.os }}-php-

	- name: PHP Version
	run: php --version

	- name: Install dependencies
	run: composer install --prefer-dist --no-progress

	- name: Run test suite
	run: composer run-script test

	- name: SonarCloud Scan
	uses: sonarsource/sonarcloud-github-action@ba3875ecf642b2129de2b589510c81a8b53dbf4e # master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback