CI: Update publish workflow

.forgejo/workflows/publish.yaml

@@ -10,8 +10,7 @@ jobs:
       image: rust:slim
     steps:
       - name: Install action dependencies
-        run: |
+        run: apt-get install --no-install-recommends --update -y nodejs curl git
-          apt-get install --no-install-recommends --update -y nodejs curl git
 
       - name: Checkout code
         uses: actions/checkout@v6
@@ -22,13 +21,19 @@ jobs:
         run: |
           rustup component add llvm-tools-preview
           rustup component add --toolchain nightly rustfmt clippy
+          rustup target add x86_64-unknown-linux-gnu
           rustup target add x86_64-unknown-linux-musl
 
       - name: Setup additional tooling
         run: .forgejo/workflows/setup-tools.sh
 
+      - name: Setup CI user
+        run: |
+          useradd -m ci && chown -R ci:ci .
+          git config --global --add safe.directory "$PWD"
+
       - name: Run all assessments
-        run: just verify
+        run: just ci verify
 
       - name: Build x64 glibc release binary
         run: just release-build x86_64-unknown-linux-gnu

.justfile

@@ -360,7 +360,7 @@ alias sa := security-assess
 # Find TODOs
 [group: 'assess']
 todos-assess:
-    ! rg -M 200 --max-columns-preview TODO src
+    ! grep -rn TODO src
 
 alias ta := todos-assess