better error handling

Author: sthulb

.github/branch_protection_settings/main.json

@@ -16,7 +16,7 @@
   },
   "required_pull_request_reviews": {
     "url": "https://api.github.com/repos/aws-powertools/powertools-lambda-java/branches/main/protection/required_pull_request_reviews",
-    "dismiss_stale_reviews": false,
+    "dismiss_stale_reviews": true,
     "require_code_owner_reviews": false,
     "require_last_push_approval": false,
     "required_approving_review_count": 0

.github/workflows/security-branch-protections.yml

@@ -36,7 +36,7 @@ jobs:
           GH_TOKEN: ${{ secrets.BRANCH_PROTECTION_TOKEN }}
         run: |
           # Fetch branch protections and store them in a file
-          gh api /repos/${{ github.repository }}/branches/${{ matrix.branch }}/protection \
+          gh api /repos/${{ github.repository }}/branches/${{ matrix.branch }}/protection | jq \
             > .github/branch_protection_settings/${{ matrix.branch }}.json
       - name: Compare branch protections
         id: compare
@@ -51,4 +51,5 @@ jobs:
       - name: Fail workflow
         if: ${{ env.diff_failed == 'true' }}
         run: |
+          git diff .github/branch_protection_settings/${{ matrix.branch }}.json
           echo "::error::Branch protections have been changed"