feat: make zarf-agent pods comply with offical restricted pod security standard #960

	name: Test Import
	on:
	pull_request:

	permissions:
	contents: read

	# Abort prior jobs in the same workflow / PR
	concurrency:
	group: import-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	test-import:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Setup Go
	uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
	with:
	go-version-file: go.mod

	- name: Run test Go program that imports Zarf
	run: \|
	cd $(mktemp -d)
	echo "$GO_MAIN" > main.go
	go mod init github.com/zarf-dev/test-import
	go mod edit -replace github.com/zarf-dev/zarf=github.com/${{ github.event.pull_request.head.repo.full_name }}@${COMMIT_SHA:0:12}
	go mod tidy
	cat go.mod \| grep -q ${COMMIT_SHA:0:12}
	go run main.go
	env:
	COMMIT_SHA: ${{ github.event.pull_request.head.sha }}
	GO_MAIN: \|
	package main

	import (
	"fmt"

	"github.com/zarf-dev/zarf/src/api/v1alpha1"
	"github.com/zarf-dev/zarf/src/pkg/packager"
	)

	func main() {
	fmt.Println(packager.Packager{})
	fmt.Println(v1alpha1.ZarfComponent{})
	}

Provide feedback