name: PR Intake Checks

on:
    pull_request_target:
        types: [opened, reopened, synchronize, edited, ready_for_review]

concurrency:
    group: pr-intake-checks-${{ github.event.pull_request.number || github.run_id }}
    cancel-in-progress: true

permissions:
    contents: read
    pull-requests: write
    issues: write

jobs:
    intake:
        name: Intake Checks
        runs-on: blacksmith-2vcpu-ubuntu-2404
        timeout-minutes: 10
        steps:
            - name: Checkout repository
              uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4

            - name: Run safe PR intake checks
              uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
              with:
                  script: |
                      const script = require('./.github/workflows/scripts/pr_intake_checks.js');
                      await script({ github, context, core });