Fix v0.35.5 pentest findings #346

	name: Aesynx CI

	on:
	push:
	branches:
	- main
	pull_request:
	branches:
	- main

	permissions:
	contents: read

	env:
	CARGO_TERM_COLOR: always
	RUST_BACKTRACE: 1

	jobs:
	checks:
	name: Security, docs, and Rust checks
	runs-on: ubuntu-latest
	timeout-minutes: 60

	steps:
	- name: Checkout repository
	uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6

	- name: Install Rust toolchain
	run: rustup show

	- name: Install security tools
	run: \|
	cargo install --locked cargo-deny
	cargo install --locked cargo-audit

	- name: Install optional SBOM tool
	run: cargo install --locked cargo-sbom --version 0.10.0

	- name: Install boot smoke tools
	run: \|
	sudo apt-get update
	sudo apt-get install -y clang gawk lld llvm mtools nasm qemu-system-x86 xorriso
	curl -sSfL https://github.com/Limine-Bootloader/Limine/releases/download/v12.3.2/limine-12.3.2.tar.gz -o /tmp/limine-12.3.2.tar.gz
	printf '%s %s\n' 'c505283106eaddfa5bbc56d8c1b1cf333d12654dcb37f80e685d3576e8702865' '/tmp/limine-12.3.2.tar.gz' \| sha256sum -c -
	mkdir -p /tmp/limine-12.3.2
	tar -xzf /tmp/limine-12.3.2.tar.gz -C /tmp/limine-12.3.2 --strip-components=1
	cd /tmp/limine-12.3.2
	llvm-objcopy --version
	OBJCOPY_FOR_TARGET=llvm-objcopy ./configure --enable-bios --enable-bios-cd --enable-uefi-x86-64 --enable-uefi-cd
	make -j"$(nproc)"
	sudo make install
	limine --version
	xorriso --version
	qemu-system-x86_64 --version

	- name: Run local check gate
	run: scripts/checks.sh

	- name: Generate SBOM
	run: scripts/generate-sbom.sh

	- name: Run QEMU smoke suite
	run: cargo xtask qemu-suite

Provide feedback