pr-comment.yml

# Post test results as pull request comment.
#
# This is done as a separate workflow as it requires write permissions. The
# tests itself might run off of a fork, i.e., an untrusted environment and should
# thus not be granted write permissions.

name: PR Comment

on:
  workflow_run:
    workflows: ["QNS", "CI", "Firefox"]
    types:
      - completed # zizmor: ignore[dangerous-triggers]

permissions:
  contents: read

jobs:
  comment:
    permissions:
      pull-requests: write
    runs-on: ubuntu-latest
    if: |
      github.event.workflow_run.event == 'pull_request' &&
      (github.event.workflow_run.conclusion == 'success' || github.event.workflow_run.conclusion == 'failure')
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          persist-credentials: false

      - uses: ./.github/actions/pr-comment
        with:
          name: ${{ github.event.workflow_run.name }}
          token: ${{ secrets.GITHUB_TOKEN }}