refactor: policy compilation #1120

	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

	name: Tests

	permissions: {}

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	unit-tests:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version-file: go.mod
	cache-dependency-path: go.sum
	- name: Run tests
	run: make tests
	- name: Upload coverage
	uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
	with:
	name: coverage.out
	path: coverage.out
	retention-days: 1
	if-no-files-found: error

	upload-to-codecov:
	needs:
	- unit-tests
	runs-on: ubuntu-latest
	steps:
	- name: Download coverage
	uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
	with:
	name: coverage.out
	- name: Upload Report to Codecov
	uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
	with:
	files: ./coverage.out
	fail_ci_if_error: true
	verbose: true
	env:
	CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

Provide feedback