one more attempt #8

	name: CI
	on:
	push:
	branches: [ "main" ]
	tags: [ "v*" ]
	permissions:
	checks: write
	contents: read
	pull-requests: read
	jobs:
	lint-test:
	name: Lint and Test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-go@v5
	with:
	go-version: stable
	- name: add just repo
	run: \|
	wget -qO - 'https://proget.makedeb.org/debian-feeds/prebuilt-mpr.pub' \| gpg --dearmor \| sudo tee /usr/share/keyrings/prebuilt-mpr-archive-keyring.gpg 1> /dev/null
	echo "deb [arch=all,$(dpkg --print-architecture) signed-by=/usr/share/keyrings/prebuilt-mpr-archive-keyring.gpg] https://proget.makedeb.org prebuilt-mpr $(lsb_release -cs)" \| sudo tee /etc/apt/sources.list.d/prebuilt-mpr.list
	- uses: ConorMacBride/install-package@v1
	with:
	apt: just
	- name: lint
	uses: golangci/golangci-lint-action@v6
	with:
	version: latest
	- name: test
	run: just test

	build-release:
	name: Build and Release
	needs: lint-test
	runs-on: ubuntu-latest
	steps:
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v1
	- name: Login to ghcr.io
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}
	- name: Extract metadata (tags, labels) for Docker
	id: meta
	uses: docker/metadata-action@v5
	with:
	images: ghcr.io/${{ github.repository }}
	tags: \|
	latest=${{ github.ref == format('refs/heads/{0}', 'main') }}

	- name: Build and push
	uses: docker/build-push-action@v6
	with:
	platforms: linux/amd64,linux/arm64
	push: true
	tags: ${{ steps.meta.outputs.tags }}
	labels: ${{ steps.meta.outputs.labels }}

Provide feedback