chore: add tests, update docs and actions (#299)

* docs: update documentation

* feat: validate-inputs has it's own pyproject

* security: mask DOCKERHUB_PASSWORD

* chore: add tokens, checkout, recrete docs, integration tests

* fix: add `statuses: write` permission to pr-lint

php-composer/README.md

@@ -17,7 +17,7 @@ Runs Composer install on a repository with advanced caching and configuration.
 | `composer-version`  | <p>Composer version to use (1 or 2)</p>                       | `false`  | `2`                                                 |
 | `stability`         | <p>Minimum stability (stable, RC, beta, alpha, dev)</p>       | `false`  | `stable`                                            |
 | `cache-directories` | <p>Additional directories to cache (comma-separated)</p>      | `false`  | `""`                                                |
-| `token`             | <p>GitHub token for private repository access</p>             | `false`  | `${{ github.token }}`                               |
+| `token`             | <p>GitHub token for private repository access</p>             | `false`  | `""`                                                |
 | `max-retries`       | <p>Maximum number of retry attempts for Composer commands</p> | `false`  | `3`                                                 |
 
 ### Outputs
@@ -84,7 +84,7 @@ This action is a `composite` action.
     # GitHub token for private repository access
     #
     # Required: false
-    # Default: ${{ github.token }}
+    # Default: ""
 
     max-retries:
     # Maximum number of retry attempts for Composer commands

php-composer/action.yml

@@ -42,7 +42,7 @@ inputs:
   token:
     description: 'GitHub token for private repository access'
     required: false
-    default: ${{ github.token }}
+    default: ''
   max-retries:
     description: 'Maximum number of retry attempts for Composer commands'
     required: false
@@ -68,10 +68,15 @@ runs:
     - name: Mask Secrets
       shell: bash
       env:
-        GITHUB_TOKEN: ${{ inputs.token }}
+        GITHUB_TOKEN: ${{ inputs.token || github.token }}
       run: |
         echo "::add-mask::$GITHUB_TOKEN"
 
+    - name: Checkout Repository
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      with:
+        token: ${{ inputs.token || github.token }}
+
     - name: Validate Inputs
       id: validate
       uses: ./validate-inputs
@@ -129,7 +134,7 @@ runs:
       id: composer
       shell: bash
       env:
-        GITHUB_TOKEN: ${{ inputs.token }}
+        GITHUB_TOKEN: ${{ inputs.token || github.token }}
         STABILITY: ${{ inputs.stability }}
         COMPOSER_VERSION: ${{ inputs.composer-version }}
       run: |