ci: vulnerability scan tweaks #100

	name: tests
	on:
	# allow this workflow to be called from other workflows, namely: publish
	workflow_call:
	push:
	branches: [ "master" ]
	pull_request:
	branches: [ "master" ]

	jobs:
	lint-kondo:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup
	uses: ./.github/workflows/shared-setup
	with:
	jdk: '11'

	- name: Lint
	run: bb lint-kondo

	lint-eastwood:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup
	uses: ./.github/workflows/shared-setup
	with:
	jdk: '11'

	- name: Lint
	run: bb lint-eastwood

	test:
	runs-on: ${{ matrix.os.name }}-latest
	strategy:
	fail-fast: false
	matrix:
	os: [{name: 'windows', shell: 'pwsh'}, {name: 'ubuntu', shell: 'bash'}]
	jdk: ['8', '11', '17', '21']

	name: ${{matrix.os.name}} - jdk ${{ matrix.jdk }}

	steps:
	#
	# Tell git not to convert newlines on checkout for Windows
	# Our tests include a maven test repo whose checksums would be affected by newline
	# conversion.
	#
	- name: Prepare git (Windows)
	run: git config --global core.autocrlf false
	if: matrix.os.name == 'windows'

	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup
	uses: ./.github/workflows/shared-setup
	with:
	jdk: ${{ matrix.jdk }}
	shell: ${{ matrix.os.shell }}

	- name: Run tests
	run: bb test --clj-version :all

Provide feedback