ci.yml

# RENDERED by `busbar-release plugin heal busbar-auth-webhook-signature` from GetBusbar/busbar-release template/; a hand
# edit is overwritten by the next sync. THIS REPO TESTS ITSELF AGAINST BUSBAR with the fleet's ONE
# harness: busbar's reusable plugin-ci.yml, taken at the busbar commit this repo pins (.busbar-ref), so
# the CI logic, the gates (busbar scripts/fleet/plugin-gates.py), the dependency policy
# (.github/fleet/deps.toml) and the contract move together (OWNER 2026-10-02). No CI logic lives here.
name: ci

on:
  push:
    branches: [dev, qa, main]
  pull_request:
    branches: [dev, qa, main]
  workflow_dispatch: {}
  # release.yml runs this file on the tagged commit before it publishes.
  workflow_call: {}

permissions:
  contents: read

jobs:
  ci:
    uses: GetBusbar/busbar/.github/workflows/plugin-ci.yml@7356bbfb6baeb0e9245a59dc74f8b4bfadb2c5a4
    with:
      service: none
      busbar_checkout: false
      macos_test: "cargo test --workspace --locked"
      extra_test: ""
      plugin_crate: busbar-auth-webhook-signature-plugin
      plugin_kind: auth
      plugin_alias: webhook-signature
    secrets: inherit