Signature support #170

	name: PHP Composer

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]
	schedule:
	- cron: '0 0 * * 0'

	permissions:
	contents: read

	jobs:
	build:

	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v3
	with:
	# Fetch more than 1 commit so Scrutinizer can deduce where we are
	fetch-depth: 2

	- name: Setup PHP
	uses: shivammathur/setup-php@v2
	with:
	php-version: '8.2'

	- name: Validate composer.json and composer.lock
	run: composer validate --strict

	- name: Cache Composer packages
	id: composer-cache
	uses: actions/cache@v3
	with:
	path: vendor
	key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }}
	restore-keys: \|
	${{ runner.os }}-php-

	- name: Install dependencies
	run: composer install --prefer-dist --no-progress --no-scripts

	- name: Lint
	run: \|
	./vendor/bin/php-cs-fixer fix --diff --dry-run -v

	- name: Static analysis
	run: \|
	./vendor/bin/phpstan
	./vendor/bin/rector --dry-run

	- name: Test
	run: \|
	php vendor/bin/phpunit

	- name: Check dependencies
	run: \|
	composer audit

Provide feedback