flow-pr-title-check.yaml

# SPDX-License-Identifier: Apache-2.0

name: "PR Title Check"
on:
  pull_request_target:
    types:
      - opened
      - reopened
      - edited
      - ready_for_review
      - review_requested
      - synchronize

defaults:
  run:
    shell: bash

permissions:
  contents: read
  statuses: write

concurrency:
  group: pr-checks-${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

jobs:
  title-check:
    name: Title Check
    runs-on: hiero-local-node-linux-medium
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
        with:
          egress-policy: audit

      # Note: After Step-Security is enabled return to step-security/conventional-pr-title-action
      - name: Check PR Title
        uses: aslafy-z/conventional-pr-title-action@a0b851005a0f82ac983a56ead5a8111c0d8e044a # v3.2.0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}