name: Community PR Check

on:
  pull_request_target:
    paths:
      - 'COMMUNITY.md'
    types: [opened, synchronize, reopened]

permissions:
  contents: read
  pull-requests: write

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      # 安全说明：只checkout本仓库main上的脚本，绝不checkout也不执行PR的代码
      - uses: actions/checkout@v4
      - name: Run community inclusion checks
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GITHUB_REPOSITORY: ${{ github.repository }}
          PR_NUMBER: ${{ github.event.pull_request.number }}
        run: python3 .github/scripts/community_check.py