ci.yml

name: CI

on:
  push:
    tags:
      - v*
    branches-ignore:
      - gh-pages
  pull_request:
    branches-ignore:
      - gh-pages
  schedule:
    # Run daily at 01:34, so we get notified if CI is broken before a pull request
    # is submitted.
    - cron: "34 1 * * *"

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read
  pull-requests: read
  checks: write
  actions: read
  security-events: write

jobs:
  lint:
    uses: ./.github/workflows/lint.yml
  codeql:
    uses: ./.github/workflows/codeql-analysis.yml
  test:
    uses: ./.github/workflows/test.yml
  # Virtual job that can be configured as a required check before a PR can be merged.
  all-required-checks-done:
    name: All required checks done
    needs:
      - lint
      - codeql
      - test
    runs-on: ubuntu-22.04
    steps:
      - run: |
          echo "All required checks done"