feat: add server mode #2

	name: Security

	on:
	push:
	tags:
	- v*
	branches:
	- main
	pull_request:

	permissions:
	contents: read

	jobs:
	# ------------------------------

	govulncheck:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	ref: ${{ github.event.pull_request.head.sha }}

	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- uses: arduino/setup-task@v2
	with:
	version: 3.x
	repo-token: ${{ secrets.GITHUB_TOKEN }}

	- name: setup
	run: task setup

	- name: install govulncheck
	run: go install golang.org/x/vuln/cmd/govulncheck@latest

	- name: run govulncheck
	run: govulncheck ./...

	# ------------------------------

	semgrep:
	runs-on: ubuntu-latest
	container:
	image: returntocorp/semgrep
	steps:
	- uses: actions/checkout@v4
	with:
	ref: ${{ github.event.pull_request.head.sha }}

	- uses: actions/checkout@v4
	with:
	repository: dgryski/semgrep-go
	path: rules

	- uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- name: semgrep
	run: semgrep scan --error --enable-nosem -f ./rules .

Provide feedback