auth.yaml

name: Check Actor Permission

on:
  workflow_dispatch:
  workflow_call:

jobs:
  check-permission:
    name: 'Check if actor has maintain role'
    runs-on: ubuntu-latest
    steps:
      - name: 'Check permission'
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          ACTOR: ${{ github.actor }}
          REPO: ${{ github.repository }}
        run: |
          PERMISSION=$(gh api "repos/$REPO/collaborators/$ACTOR/permission" --jq '.permission')
          echo "Permission level for $ACTOR: $PERMISSION"

          case "$PERMISSION" in
            maintain|admin)
              echo "Access granted: $ACTOR has '$PERMISSION' permission."
              ;;
            *)
              echo "Access denied: $ACTOR has '$PERMISSION' permission, but 'maintain' or higher is required."
              exit 1
              ;;
          esac