name: vendored

# Weekly, not per-PR: this reaches out to every upstream repo, and a vendored
# skill being a release behind is not a reason to block a change.
on:
  schedule:
    - cron: "0 9 * * 1"
  workflow_dispatch:

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Check vendored skills against upstream
        run: bin/check-vendored.sh | tee out.txt
      # check-vendored.sh always exits 0 (it is a report, and an unreachable
      # remote is not a failure). Turn actual drift into a red run here.
      - name: Fail if behind
        run: '! grep -q "behind upstream" out.txt'