name: ci

# Thin caller, matching the org convention. The job id `ci` calling a reusable
# whose job id is also `ci` produces the status context `ci / ci`, which is the
# check the org "main branch protection" ruleset requires. A job defined
# directly here would emit only `ci` and would never satisfy that rule.

on:
  pull_request:
    branches: [main]

permissions:
  contents: read

jobs:
  ci:
    uses: ./.github/workflows/ci-runner-checks.yaml