Main hal 20260526 #93

	name: CI

	on:
	push:
	branches: [main, master]
	pull_request:
	branches: [main, master]

	permissions:
	contents: read

	concurrency:
	group: ci-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	build-and-test:
	name: Build & Test
	runs-on: ubuntu-latest
	timeout-minutes: 15

	steps:
	- name: Checkout
	uses: actions/checkout@v6

	- name: Setup .NET
	uses: actions/setup-dotnet@v5
	with:
	dotnet-version: 10.0.x

	- name: Restore
	run: dotnet restore src/AIPolicyEngine.slnx

	- name: Build
	run: dotnet build src/AIPolicyEngine.slnx --no-restore --configuration Release

	- name: Test
	run: dotnet test src/AIPolicyEngine.Tests/AIPolicyEngine.Tests.csproj --no-build --configuration Release --verbosity normal

	- name: Check for vulnerable packages
	run: \|
	dotnet list src/AIPolicyEngine.slnx package --vulnerable --include-transitive 2>&1 \| tee vulnerable.txt
	if grep -qi "has the following vulnerable packages" vulnerable.txt; then
	echo "::error::Vulnerable packages detected!"
	exit 1
	fi

Provide feedback