add ci workflow running syntax checks and pen tests