check.yml

name: Check

on:
  pull_request:
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: check-${{ github.ref }}
  cancel-in-progress: true

jobs:
  check:
    name: check
    runs-on: ubuntu-latest
    timeout-minutes: 10

    steps:
      - name: Checkout
        env:
          REPOSITORY: ${{ github.repository }}
          SERVER_URL: ${{ github.server_url }}
          SHA: ${{ github.sha }}
        run: |
          set -euo pipefail
          git init .
          git remote add origin "$SERVER_URL/$REPOSITORY.git"
          git -c protocol.version=2 fetch --no-tags --depth=1 origin "$SHA"
          git checkout --detach FETCH_HEAD

      - name: Install test tools
        run: |
          set -euo pipefail
          sudo apt-get update
          sudo apt-get install -y --no-install-recommends shellcheck gnupg

      - name: Run checks
        run: bash scripts/check.sh