Add workflow to synchronize go mod changes with submodules #5

	name: Synchronize go.mod in submodules

	on:
	pull_request:
	branches:
	- main
	types:
	- opened
	- synchronize

	permissions:
	contents: write

	jobs:
	synchronize-go-mod:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
	with:
	ref: ${{ github.event.pull_request.head.ref }}

	- name: Install Go
	uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version-file: go.mod

	- name: Synchronize go.mod in submodules
	run: \|
	go mod tidy
	cd examples/oci-image-verification; go mod tidy

	- name: Commit and push changes
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	if [ -n "$(git status --porcelain)" ]; then
	echo "Changes detected:"
	git diff
	git config --global user.name "github-actions[bot]"
	git config --global user.email "github-actions[bot]@users.noreply.github.com"
	git commit -a -s -m "Synchronize go.mod in submodules"
	git push origin HEAD:${{ github.event.pull_request.head.ref }}
	else
	echo "No changes to commit"
	fi

Provide feedback