# Store reviewed scantelio.mjs and run-ci.sh in ci/ before using this workflow.
# Dispatch the trusted ref actually deployed to staging. Protect the environment.
name: Authorized staging API check
on: workflow_dispatch
permissions:
  contents: read
jobs:
  staging-api:
    runs-on: ubuntu-latest
    environment: staging
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
        with:
          node-version: "22"
      - name: Run the staging gate
        working-directory: ci
        env:
          SCANTELIO_API_URL: ${{ vars.SCANTELIO_API_URL }}
          SCANTELIO_PROJECT: ${{ vars.SCANTELIO_PROJECT }}
          SCANTELIO_ENVIRONMENT: ${{ vars.SCANTELIO_ENVIRONMENT }}
          SCANTELIO_DEPLOYMENT: ${{ vars.SCANTELIO_DEPLOYMENT }}
          SCANTELIO_TOKEN: ${{ secrets.SCANTELIO_TOKEN }}
          SCANTELIO_REVISION: ${{ github.sha }}
          SCANTELIO_IDEMPOTENCY_KEY: ${{ github.repository_id }}-${{ github.run_id }}-${{ github.run_attempt }}
        run: bash run-ci.sh