Bump the actions group with 2 updates (#330) #682

	name: verify

	on:
	push:
	branches: ["main"]
	pull_request:

	permissions: {}

	jobs:
	license-check:
	name: license boilerplate check
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false
	- uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
	with:
	go-version-file: './go.mod'
	check-latest: true

	- name: Install addlicense
	run: go install github.com/google/addlicense@latest

	- name: Check license headers
	run: \|
	set -e
	addlicense --check --ignore */.yml --ignore */.yaml -l apache -c 'The Sigstore Authors' -v *

	golangci:
	name: lint
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false
	- uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
	with:
	go-version-file: './go.mod'
	check-latest: true

	- name: golangci-lint
	uses: golangci/golangci-lint-action@051d91933864810ecd5e2ea2cfd98f6a5bca5347 # v6.3.2
	with:
	version: v1.63
	args: --timeout 5m

Provide feedback