on.pr.yml

name: 'PR'

on:
  pull_request:
    branches:
      - main

permissions:
  contents: read

jobs:
  build-test:
    name: 'Build & Test'
    uses: ./.github/workflows/ci.build-test.yml
    secrets: inherit

  build-native:
    name: 'Build & Test'
    uses: ./.github/workflows/ci.native-builds.yml
    permissions:
      actions: read
      contents: write
      id-token: write
    with:
      artifact-prefix: hashlock-pr${{ github.event.number }}

  check-dist:
    name: 'Checks'
    uses: ./.github/workflows/check.dist.yml

  check-eslint:
    name: 'Checks'
    uses: ./.github/workflows/check.eslint.yml
    permissions:
      contents: read
      security-events: write

  check-fmt:
    name: 'Checks'
    uses: ./.github/workflows/check.format.yml

  check-dependencies:
    name: 'Checks'
    uses: ./.github/workflows/check.dependency-review.yml

  check-codeql:
    name: 'Checks'
    uses: ./.github/workflows/check.codeql-analysis.yml
    permissions:
      actions: read
      checks: write
      contents: read
      security-events: write