Skip to content

chore: Sync Core

chore: Sync Core #1196

name: Validate caller workflows
# Thin caller of HarperFast/ai-review-prompts'
# `_validate-caller-workflows.yml`. Validates
# `.github/workflows/claude-*.yml` caller files for shadow jobs
# and mutable refs.
#
# Runs on every PR and every push to `main` — no `paths:` filter.
# A required status check that only fires on workflow-touching PRs
# stays permanently pending on every other PR (GitHub has no
# "required if it runs" semantic). The validator's runtime is
# trivial (yq-parses a few caller files), so unconditional firing
# is the right trade-off for satisfiability.
#
# Make this `validate` job a REQUIRED status check on `main`.
on:
pull_request:
push:
branches: [main]
jobs:
validate:
uses: HarperFast/ai-review-prompts/.github/workflows/_validate-caller-workflows.yml@224c2adcfdb408d68c7ca48eb618623c990a96ad # main 2026-07-28 (#80 week-of-07-20 calibration: producing-side guard verification; on 82c9484)
with:
# Same SHA as the `uses:` ref above — the reusable uses this
# to check out the validator script at the matching version.
ai-review-prompts-ref: 224c2adcfdb408d68c7ca48eb618623c990a96ad