docs: update contribution guidlines, enforce security policies #9

	name: CI

	on:
	pull_request:
	branches: [main]
	push:
	branches: [main]

	jobs:
	frontend-lint:
	name: Frontend Lint
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 20
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Run ESLint
	run: npm run lint

	frontend-build:
	name: Frontend Build
	runs-on: ubuntu-latest
	needs: frontend-lint
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 20
	cache: npm

	- name: Install dependencies
	run: npm ci

	- name: Build
	run: npm run build
	env:
	VITE_API_URL: https://karansingh12-freshscan-api.hf.space
	VITE_DEV_MODE: false

	backend-lint-and-test:
	name: Backend Lint and Tests
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: backend
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	cache: pip

	- name: Install dependencies
	run: pip install -r requirements-ci.txt

	- name: Lint with Ruff
	run: ruff check . --config ruff.toml

	- name: Run tests
	run: python -m pytest tests/test_ci.py -v
	env:
	DEV_BYPASS_AUTH: "false"
	DEV_BYPASS_TOKEN: ci-test-token
	SUPABASE_URL: ""
	SUPABASE_KEY: ""
	SUPABASE_SERVICE_KEY: ""
	FRONTEND_URL: http://localhost:5173
	API_BASE_URL: http://localhost:8000

Provide feedback