add rfc5280::san::ip-in-dns #1059

	name: CI

	on:
	push:
	branches:
	- main
	pull_request:

	jobs:
	check-site:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false

	- uses: actions/setup-python@v5
	with:
	python-version: ">=3.12"
	cache: "pip"
	cache-dependency-path: pyproject.toml

	- name: run site build
	run: make site

	check-schema:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false

	- uses: actions/setup-python@v5
	with:
	python-version: ">=3.12"
	cache: "pip"
	cache-dependency-path: pyproject.toml

	- uses: actions/setup-go@v5
	with:
	go-version: ">=1.20.5"

	- name: fail if the schema has changed
	run: \|
	make limbo-schema.json
	git diff --exit-code -- limbo-schema.json

	- name: fail if schema.go has changed
	run: \|
	make -C harness/gocryptox509 schema.go
	git diff --exit-code -- harness/gocryptox509/schema.go


	check-harnesses:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	persist-credentials: false

	- uses: actions/setup-go@v5
	with:
	go-version: ">=1.20.5"

	- name: check that harnesses build
	run: make build-harnesses -j

	all-checks-pass:
	if: always()

	needs:
	- check-site
	- check-schema
	- check-harnesses

	runs-on: ubuntu-latest

	steps:
	- name: check jobs
	uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
	with:
	jobs: ${{ toJSON(needs) }}

Provide feedback