ci: add GitHub Actions workflow

[okwn]

Summary

Adds CI workflow.

Testing

CI passes.

---

Summary by cubic

Add a GitHub Actions CI workflow to run checks, build, and unit tests on pushes and PRs to main. Standardizes Node 20 with pnpm and caches dependencies for faster runs.

• New Features
  • Triggers on push and pull_request to main.
  • Sets up Node 20, pnpm 10.33.0, and enables pnpm cache.
  • Runs pnpm install --frozen-lockfile, pnpm run check, pnpm run build, and pnpm run test:unit.

^{Written for commit f755acc. Summary will update on new commits. Review in cubic}

[cubic-dev-ai]

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name=".github/workflows/test.yml">

<violation number="1" location=".github/workflows/test.yml:13">
P2: Workflow uses mutable action tags instead of pinning to immutable commit SHAs, enabling potential CI supply-chain compromise</violation>
</file>

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[cubic-dev-ai]

P2: Workflow uses mutable action tags instead of pinning to immutable commit SHAs, enabling potential CI supply-chain compromise

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At .github/workflows/test.yml, line 13:

<comment>Workflow uses mutable action tags instead of pinning to immutable commit SHAs, enabling potential CI supply-chain compromise</comment>

<file context>
@@ -0,0 +1,24 @@
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
</file context>