Merge pull request #43 from affaan-m/fix/version-sync #131

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	verify:
	name: Verify (Node ${{ matrix.node-version }})
	runs-on: ubuntu-latest
	timeout-minutes: 25

	strategy:
	fail-fast: false
	matrix:
	node-version: [18, 20, 22]

	steps:
	- uses: actions/checkout@v4

	- name: Use Node.js
	uses: actions/setup-node@v4
	with:
	node-version: ${{ matrix.node-version }}
	cache: npm
	cache-dependency-path: package-lock.json

	- name: Install dependencies
	run: npm ci

	- name: Type check
	run: npm run typecheck

	- name: Build
	run: npm run build

	- name: Run tests
	run: npm test

	self-scan:
	name: Self-scan examples
	runs-on: ubuntu-latest
	timeout-minutes: 15
	needs: verify

	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 22
	cache: npm
	cache-dependency-path: package-lock.json

	- name: Install dependencies
	run: npm ci

	- name: Build
	run: npm run build

	- name: Self-scan vulnerable examples
	run: node dist/index.js scan --path examples/vulnerable --format json > scan-results.json \|\| true

	- name: Upload scan results
	uses: actions/upload-artifact@v4
	with:
	name: scan-results
	path: scan-results.json
	if-no-files-found: error

Provide feedback