pr-verify.yml

name: PR Verifier

on:
  # NB: using `pull_request_target` runs this in the context of
  # the base repository, so it has permission to upload to the checks API.
  # This means changes won't kick in to this file until merged onto the
  # main branch.
  pull_request_target:
    types: [opened, edited, reopened, synchronize]

permissions:
  contents: read

jobs:
  verify:
    name: verify PR contents
    permissions:
      checks: write
      pull-requests: read
    runs-on: ubuntu-latest
    steps:
      - name: Verifier action
        id: verifier
        uses: kubernetes-sigs/kubebuilder-release-tools@v0.4.3
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}