feat(sca): add CycloneDX SBOM export via --format cyclonedx (#36) #3

	name: Development Pipeline

	on:
	push:
	branches: [ development ]
	pull_request:
	branches: [ development ]

	permissions:
	contents: read

	jobs:
	# ============ BUILD & TEST ============
	build-test:
	name: Build & Test (Development)
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v7

	- name: Set up Go
	uses: actions/setup-go@v6
	with:
	go-version: '1.26.4'
	cache: true

	- name: Download dependencies
	run: go mod download

	- name: Run go vet
	run: go vet ./...

	- name: Run tests
	run: go test ./... -v -race -coverprofile=coverage.out -covermode=atomic

	- name: Build binary (development branding)
	run: \|
	go build \
	-ldflags "-X github.com/filipi86/drogonsec/internal/cli.Environment=development" \
	-o bin/drogonsec-dev \
	./cmd/drogonsec

	# ============ LINT ============
	lint:
	name: Lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: actions/setup-go@v6
	with:
	go-version: '1.26.4'
	cache: true
	- name: Run golangci-lint
	uses: golangci/golangci-lint-action@v9
	with:
	version: v2.0.0

Provide feedback