feat: run container as a non-root user #76

	---
	name: Build, test and lint

	on:
	push:
	branches: ["main"]
	pull_request:
	branches: ["main"]


	jobs:
	build-test-lint:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Install Go
	uses: actions/setup-go@v5
	with:
	go-version: '^1.23.2'

	- name: Install tools
	run: \|
	go install github.com/segmentio/golines@v0.12.2
	go install mvdan.cc/gofumpt@v0.7.0
	go install github.com/securego/gosec/v2/cmd/gosec@v2.21.4
	go install github.com/mgechev/revive@v1.4.0
	go install github.com/boumenot/gocover-cobertura@v1.3.0

	- name: Build
	run: make build

	- name: Lint
	run: make lint

	- name: Run tests
	run: make test

	- name: Require clean working directory
	shell: bash
	run: \|
	if ! git diff --exit-code; then
	echo "Working tree dirty at end of job"
	exit 1
	fi

Provide feedback