leaks.yml

name: Leaks Checker

on:
  issue_comment:
    types: [created]
  pull_request:
    types: [opened]

permissions:
  contents: read
  pull-requests: write
  issues: write

jobs:
  leaks-checker:
    if: |
      github.event.pull_request != null || (github.event_name == 'issue_comment' && github.event.comment.body == '/ci leaks' && github.event.issue.pull_request != null)
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event.pull_request.head.ref || (github.event.issue.pull_request != null && format('refs/pull/{0}/head', github.event.issue.number)) || github.ref }}

      - name: Run leaks checker script
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NUMBER: ${{ github.event.pull_request.number || github.event.issue.number }}
          REPO: ${{ github.repository }}
          IS_PR: ${{ github.event_name == 'pull_request' || github.event.issue.pull_request != null }}
        run: |
          chmod +x ci/leaks/main.sh
          bash ci/leaks/main.sh