test perms #35

	name: Pull Request
	on:
	pull_request:
	branches:
	- main

	permissions:
	contents: read

	jobs:
	go-bench:
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v3.5.2
	with:
	fetch-depth: 0

	- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
	with:
	go-version-file: './go.mod'
	cache-dependency-path: './go.sum'
	check-latest: true

	- name: Run benchmark on PR
	run: \|
	set -o pipefail
	make bench \| tee ${{ github.sha }}_bench_output.txt

	- name: Get Main branch SHA
	id: get-main-branch-sha
	run: \|
	SHA=$(git rev-parse origin/main)
	echo "sha=$SHA" >> $GITHUB_OUTPUT

	- name: Download benchmark from Main
	uses: actions/cache/restore@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
	with:
	fail-on-cache-miss: true
	path: ./cache/benchmark-data.json
	key: ${{ steps.get-main-branch-sha.outputs.sha }}-go-benchmark

	- name: Compare benchmarks
	uses: benchmark-action/github-action-benchmark@70405016b032d44f409e4b1b451c40215cbe2393 # v1.18.0
	with:
	# What benchmark tool the output.txt came from
	tool: 'go'
	# Where the output from the benchmark tool is stored
	output-file-path: ${{ github.sha }}_bench_output.txt
	# Where the previous data file is stored
	external-data-json-path: ./cache/benchmark-data.json
	# Do not save the data
	save-data-file: false
	# Workflow will fail when an alert happens
	fail-on-alert: true
	github-token: ${{ secrets.GITHUB_TOKEN }}
	comment-on-alert: true
	# Enable Job Summary for PRs
	summary-always: true
	comment-always: true

Provide feedback