pull-request.yml

name: On Pull Request

on: pull_request

permissions:
  pull-requests: write
  contents: write
  actions: read
  security-events: write

jobs:
  dependabot:
    uses: ./.github/workflows/99-auto-merge.yml

  codeql:
    uses: ./.github/workflows/99-codeql-analysis.yml

  dependency-review:
    uses: ./.github/workflows/99-dependency-review.yml

  labeler:
    uses: ./.github/workflows/99-labeler.yml

  scan-secrets:
    uses: ./.github/workflows/00-scan-secrets.yml

  init:
    uses: ./.github/workflows/00-init.yml

  build:
    uses: ./.github/workflows/01-build.yml
    needs: [init]
    secrets: inherit

  validate:
    uses: ./.github/workflows/01-validate.yml
    needs: [init]
    secrets: inherit

  test:
    uses: ./.github/workflows/02-test.yml
    needs: [build]
    secrets: inherit

  preview:
    if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
    uses: ./.github/workflows/03-hosting.yml
    needs: [test]
    secrets: inherit