fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #246

	# SPDX-License-Identifier: MPL-2.0
	name: Haskell CI

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]

	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	- uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0
	with:
	ghc-version: '9.8.2'
	cabal-version: '3.10'

	- name: Cache
	uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
	env:
	cache-name: cache-cabal
	with:
	path: ~/.cabal
	key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('*/.cabal') }}-${{ hashFiles('**/cabal.project') }}
	restore-keys: \|
	${{ runner.os }}-build-${{ env.cache-name }}-
	${{ runner.os }}-build-
	${{ runner.os }}-

	- name: Install dependencies
	run: \|
	cabal update
	cabal build --only-dependencies --enable-tests --enable-benchmarks
	- name: Build
	run: cabal build --enable-tests --enable-benchmarks all
	- name: Run tests
	run: cabal test all

Provide feedback