Add xss-lock. #217

	name: CI
	on:
	- push
	permissions:
	issues: write
	pull-requests: write
	# For GitHub Comment Reporter
	# https://megalinter.io/latest/reporters/GitHubCommentReporter/
	jobs:
	Mega-Linter:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	# Mega-Linter
	- name: Mega-Linter
	id: ml
	# You can override Mega-Linter flavor used to have faster performances
	# More info at https://megalinter.io/flavors/
	uses: oxsecurity/megalinter@v7
	env:
	# All available variables are described in documentation
	# https://megalinter.io/config-file/
	VALIDATE_ALL_CODEBASE: true
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	BASH_SHELLCHECK_ARGUMENTS: "--source-path=/github/workspace"
	# See `.mega-linter.yml`.

	# Upload Mega-Linter artifacts
	- name: Archive production artifacts
	if: success() \|\| failure()
	uses: actions/upload-artifact@v4
	with:
	name: Mega-Linter reports
	path: \|
	megalinter-reports
	mega-linter.log

	test:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Guix cache
	uses: actions/cache@v4
	with:
	path: ~/.cache/guix
	# use a key that (almost) never matches
	key: guix-cache-${{ github.sha }}
	restore-keys: \|
	guix-cache-

	- name: Install Guix
	uses: PromyLOPh/guix-install-action@v1

	- name: Lint
	run: make lint
	env:
	TMPDIR: "${{ runner.temp }}"

	- name: Build
	run: make build
	env:
	TMPDIR: "${{ runner.temp }}"

	- name: Test
	run: make test
	env:
	TMPDIR: "${{ runner.temp }}"

Provide feedback