verify-compiled.yml

name: Verify compiled workflows

on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
    paths:
      - ".github/workflows/*.md"
      - ".github/workflows/*.lock.yml"

permissions:
  contents: read

jobs:
  verify:
    if: github.event.repository.fork == false
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Install gh-aw CLI
        uses: github/gh-aw-actions/setup-cli@05205436a78512d71a2d842e46586ed05f4fa058 # v0.82.10
        with:
          version: v0.83.1
      - name: Recompile workflows
        # Full-repository compile so the diff check below covers all workflows.
        run: gh aw compile
      - name: Check for uncommitted changes
        run: |
          if [ -n "$(git diff)" ]; then
            echo "::error::Lock files are out of date. Run 'gh aw compile' and commit the results."
            echo ""
            git diff --stat
            echo ""
            git diff -- '*.lock.yml'
            exit 1
          fi
          echo "All lock files are up to date."