Bump actions/dependency-review-action from 4.2.4 to 4.2.5 #329

	# SPDX-FileCopyrightText: 2022 Winni Neessen <[email protected]>
	#
	# SPDX-License-Identifier: CC0-1.0

	name: Codecov workflow
	on:
	push:
	branches:
	- main
	paths:
	- '**.go'
	- 'go.*'
	- '.github/**'
	- 'codecov.yml'
	pull_request:
	branches:
	- main
	paths:
	- '**.go'
	- 'go.*'
	- '.github/**'
	- 'codecov.yml'
	env:
	TEST_HOST: ${{ secrets.TEST_HOST }}
	TEST_FROM: ${{ secrets.TEST_USER }}
	TEST_ALLOW_SEND: "1"
	TEST_SMTPAUTH_USER: ${{ secrets.TEST_USER }}
	TEST_SMTPAUTH_PASS: ${{ secrets.TEST_PASS }}
	TEST_SMTPAUTH_TYPE: "LOGIN"
	permissions:
	contents: read

	jobs:
	run:
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ubuntu-latest, macos-latest, windows-latest]
	go: [1.18, 1.19, '1.20', '1.21', '1.22']
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
	with:
	egress-policy: audit

	- name: Checkout Code
	uses: actions/checkout@61b9e3751b92087fd0b06925ba6dd6314e06f089 # master
	- name: Setup go
	uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
	with:
	go-version: ${{ matrix.go }}
	- name: Install sendmail
	if: matrix.go == '1.22' && matrix.os == 'ubuntu-latest'
	run: \|
	sudo apt-get -y install sendmail; which sendmail
	- name: Run Tests
	run: \|
	go test -v -race --coverprofile=coverage.coverprofile --covermode=atomic ./...
	- name: Upload coverage to Codecov
	if: success() && matrix.go == '1.22' && matrix.os == 'ubuntu-latest'
	uses: codecov/codecov-action@54bcd8715eee62d40e33596ef5e8f0f48dbbccab # v4.1.0
	with:
	token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos

Provide feedback