# PR quality pipeline.
#
# Homeboy Action owns the CI DAG so command failures aggregate instead of
# skipping later quality checks. Build remains the hard gate because this repo
# validates the Homeboy binary produced from the PR source.

name: CI

on:
  pull_request:
    branches: [main]
  workflow_dispatch:

concurrency:
  group: ci-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true

permissions:
  actions: read
  contents: write
  pull-requests: write
  issues: write

jobs:
  homeboy:
    uses: Extra-Chill/homeboy-action/.github/workflows/ci.yml@v2
    with:
      component: homeboy
      commands: audit,lint,test
      differential-gating: true
      build-command: cargo build --release
      build-artifact-path: target/release/homeboy
    secrets: inherit
