From eddb250fbfdda297e2c42687c4b72c4b670684cb Mon Sep 17 00:00:00 2001
From: Tim Cuthbertson <tim@gfxmonk.net>
Date: Sat, 9 May 2026 12:59:56 +1000
Subject: [PATCH 1/2] test workflow: use koka@dev and run tests in their own
 step

---
 .github/workflows/test.yml | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a8c76fa..fe562bd 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+  pull_request:
   workflow_dispatch:
 
 jobs:
@@ -11,9 +12,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Set up Koka
         uses: koka-community/setup-koka@v1
-        with: 
+        with:
+          koka_ref: "dev"
           packages: ""
-          run_tests: true
\ No newline at end of file
+      - name: Run tests
+        run: |
+          koka --verbose=0 --console=ansi -e std/test/detect

From 6f5028d52f058436230235b4161ca8fb5dbfc47d Mon Sep 17 00:00:00 2001
From: Tim Cuthbertson <tim@gfxmonk.net>
Date: Sat, 9 May 2026 13:04:12 +1000
Subject: [PATCH 2/2] limit test workflow permissions

---
 .github/workflows/test.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fe562bd..c79aaf6 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -7,6 +7,9 @@ on:
   pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest