auth.yaml

name: Check Actor Permission

on:
  workflow_dispatch:
  workflow_call:

jobs:
  check-permission:
    name: 'Check if actor has maintain role'
    runs-on: ubuntu-latest
    steps:
      - name: 'Check permission'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          ACTOR: ${{ github.triggering_actor }}
          REPO: ${{ github.repository }}
        run: |
          HAS_MAINTAIN=$(gh api "repos/$REPO/collaborators/$ACTOR/permission" --jq '.user.permissions.maintain')
          echo "Maintain permission for $ACTOR: $HAS_MAINTAIN"

          if [ "$HAS_MAINTAIN" = "true" ]; then
            echo "Access granted: $ACTOR has maintain permission."
          else
            echo "Access denied: $ACTOR does not have maintain permission."
            exit 1
          fi