Bump actions/checkout from 4.2.1 to 4.2.2 #160

	name: Tests
	on:
	pull_request_target: # To test cosign signing.
	branches: ['main']
	pull_request:
	branches: ['main']
	push:
	branches: ['main']

	jobs:
	test:
	name: Test
	runs-on: ubuntu-latest
	permissions:
	contents: read
	id-token: write

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	if: github.event_name == 'pull_request_target'
	with:
	ref: refs/pull/${{ github.event.pull_request.number }}/merge

	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	if: github.event_name != 'pull_request_target'

	- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version: '1.22'
	check-latest: true

	- uses: chainguard-dev/actions/setup-registry@main
	with:
	port: 5000

	- uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
	with:
	terraform_version: '1.8.*'
	terraform_wrapper: false

	- working-directory: ./examples/static
	env:
	TF_VAR_target_repository: localhost:5000/static
	TF_VAR_verify: ${{github.event_name == 'pull_request_target'}}
	run: \|
	terraform init -upgrade
	terraform apply -auto-approve

	# Test with archs and check_sbom=false
	- working-directory: ./examples/static
	env:
	TF_VAR_target_repository: localhost:5000/static
	TF_VAR_archs: '["x86_64"]'
	TF_VAR_check_sbom: 'false'
	TF_VAR_verify: ${{github.event_name == 'pull_request_target'}}
	run: \|
	terraform init -upgrade
	terraform apply -auto-approve

Provide feedback