validate-flags.yaml

name: "Validate Flags"

on:
  pull_request:
    types:
      - opened
      - synchronize
      - reopened
    branches:
      - main
  workflow_dispatch:

jobs:
  validate-flags:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0 # Required for git branch comparison

      # Automatically compares against PR base branch (main)
      - name: Compare against base branch
        uses: open-feature/action@v0.0.2
        with:
          manifest: "flags.json"

      - name: Compare against remote manifest
        if: ${{ secrets.FLAGD_STUDIO_TOKEN != '' }} # Secret not accessible for PRs from forks
        uses: open-feature/action@v0.0.2
        with:
          manifest: "flags.json"
          against: "https://flagd-studio.onrender.com/api"
          auth-token: ${{ secrets.FLAGD_STUDIO_TOKEN }}