[filter] declarative paradigm #1518

	name: 'Sanitizer'

	on:
	push:
	branches: [ 'master' ]
	pull_request:
	branches: [ 'master' ]
	schedule:
	- cron: '0 0 * * */5'

	permissions:
	contents: read

	jobs:
	build:
	strategy:
	fail-fast: false
	matrix:
	sanitizer:
	- name: 'Address'
	cpp_flags: '-g -O0 -fsanitize=address'
	run_flags: 'ASAN_OPTIONS=verbosity=2:strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1'
	- name: 'Leak'
	cpp_flags: '-g -O0 -fsanitize=leak'
	run_flags: 'LSAN_OPTIONS=verbosity=2'
	- name: 'Thread'
	cpp_flags: '-g -O0 -fsanitize=thread'
	run_flags: 'TSAN_OPTIONS=verbosity=2'
	- name: 'Undefined'
	cpp_flags: '-g -O0 -fsanitize=undefined'
	run_flags: 'UBSAN_OPTIONS=verbosity=2'
	name: '${{ matrix.sanitizer.name }}'
	runs-on: ubuntu-latest
	env:
	CXXFLAGS: '${{ matrix.sanitizer.cpp_flags }}'
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
	with:
	egress-policy: audit
	- name: 'Checkout'
	uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
	- name: 'Install'
	run: \|
	sudo add-apt-repository ppa:ubuntu-toolchain-r/test
	sudo apt update
	sudo apt upgrade
	sudo apt install g++-13
	- name: 'Configure'
	env:
	CXX: 'g++-13'
	CC: 'gcc-13'
	run: cmake -S . -B 'build'
	- name: 'Build'
	run: cmake --build 'build' --verbose --parallel 4
	- name: 'Test'
	run: ${{ matrix.sanitizer.run_flags }} ctest --test-dir 'build' --tests-regex 'kalman_(test\|sample)' --verbose --parallel 4

Provide feedback