Add snyk workflow

.github/workflows/main.yaml

@@ -12,4 +12,11 @@ permissions:
 
 jobs:
   lint:
-    uses: ./.github/workflows/lint.yaml
+    uses: ./.github/workflows/lint.yaml
+  tests:
+    uses: ./.github/workflows/tests.yaml
+    needs: lint
+  snyk: 
+    uses: ./.github/workflows/snyk.yaml
+    needs: [lint, tests]
+    secrets: inherit

.github/workflows/snyk.yaml

@@ -0,0 +1,20 @@
+name: Snyk Security Scan
+
+on: 
+    workflow_call:
+      secrets:
+        SNYK_TOKEN:
+          required: true
+
+jobs:
+  security:
+    name: Run Snyk to check for vulnerabilities
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Run Snyk to check for vulnerabilities
+        uses: snyk/actions/php@master
+        env:
+          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
+        with:
+          args: --severity-threshold=high

.github/workflows/tests.yaml

@@ -0,0 +1,39 @@
+name: Tests
+
+on:
+  workflow_call:
+
+jobs:
+  tests:
+    name: Run tests
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.2'
+          extensions: openssl, json
+          coverage: none
+
+      - name: Get Composer cache directory
+        id: composer-cache
+        run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
+
+      - name: Cache Composer dependencies
+        uses: actions/cache@v4
+        with:
+          path: ${{ steps.composer-cache.outputs.dir }}
+          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: ${{ runner.os }}-composer-
+
+      - name: Install dependencies
+        run: composer install --prefer-dist --no-progress --no-suggest
+
+      - name: Run tests
+        run: composer run test
+
+

.gitignore

@@ -1,10 +1,9 @@
 /vendor/
-/composer.lock
 /.idea/
 /.vscode/
 /.phpunit.result.cache
 /.phpunit.cache/
 /.php-cs-fixer.cache
 /phpunit.xml
 /.env
-*.log
+*.log