ci: add GitHub Actions workflow for Bearer PR checks

- Add a GitHub Actions workflow for Bearer PR checks
- Configure the workflow to trigger on pull request events (opened, synchronize, reopened)
- Set read permissions for contents and write permissions for pull requests
- Define a job to run on `ubuntu-latest`
- Include steps for checking out the repository, setting up reviewdog, running Bearer report, and running reviewdog with the report

Signed-off-by: appleboy <[email protected]>

.github/workflows/bearer.yml

@@ -0,0 +1,35 @@
+name: Bearer PR Check
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  rule_check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - uses: reviewdog/action-setup@v1
+        with:
+          reviewdog_version: latest
+
+      - name: Run Report
+        id: report
+        uses: bearer/bearer-action@v2
+        with:
+          format: rdjson
+          output: rd.json
+          diff: true
+
+      - name: Run reviewdog
+        if: always()
+        env:
+          REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          cat rd.json | reviewdog -f=rdjson -reporter=github-pr-review