project-plan-check #5

	name: project-plan-check

	# Reports whether docs/GITHUB_PROJECT.md has drifted from live GitHub state.
	#
	# All of the logic lives in scripts/ci/project-plan-check.sh, which is
	# runnable and tested locally. Shell inside a `run:` block is none of those
	# things, and editing it needs the `workflow` scope to push -- so this file
	# holds only the parts that genuinely have to be here: when it runs, what it
	# may access, and what it calls.

	on:
	schedule:
	- cron: "0 6 * * 1" # Mondays, 06:00 UTC
	workflow_dispatch:

	permissions:
	contents: read
	issues: read

	jobs:
	check:
	name: Is the plan current?
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-python@v5
	with:
	python-version: "3.12"

	- name: Report drift
	env:
	GH_TOKEN: ${{ github.token }}
	# Required here. The render script strips GH_TOKEN and
	# GITHUB_TOKEN by default, which is exactly how Actions
	# authenticates; without this every gh call exits 4 with a message
	# pointing at `gh auth login`, i.e. away from the real cause.
	NO_ENV_PREFIX: "1"
	run: scripts/ci/project-plan-check.sh

Navigation Menu