[StepSecurity] ci: Harden GitHub Actions #822

	name: "Build"

	on:
	push:
	branches: [ develop ]
	pull_request:
	branches: [ develop ]

	jobs:
	build:

	runs-on: ubuntu-22.04

	steps:
	- uses: actions/checkout@v4

	- name: Setup PHP with PECL extension
	uses: shivammathur/setup-php@v2
	with:
	php-version: '8.1'
	extensions: ldap, xdebug, gd, json, xml, curl, zip, mbstring

	- name: Validate composer.json and composer.lock
	run: composer validate --strict

	- name: Cache Composer packages
	id: composer-cache
	uses: actions/cache@v3
	with:
	path: vendor
	key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }}
	restore-keys: \|
	${{ runner.os }}-php-

	- name: PHP Version
	run: php --version

	- name: Install dependencies
	run: composer install --prefer-dist --no-progress

	- name: Run test suite
	run: composer run-script test

	- name: SonarCloud Scan
	uses: sonarsource/sonarcloud-github-action@master
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Provide feedback