fix: security and reliability — path traversal protection, dummy vert… #13

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	ci:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.25'
	cache-dependency-path: go.sum

	- name: Build
	run: go build ./...

	- name: Test
	run: go test ./...

	- name: Vet
	run: go vet ./...

	- name: Format check
	run: test -z "$(gofmt -l .)" \|\| (echo "Files need gofmt:" && gofmt -l . && exit 1)

Provide feedback