name: Lint PR

on:
  # Using 'pull_request_target' to *not* run changes in the PR branch.
  # https://docs.zizmor.sh/audits/#dangerous-triggers
  # zizmor: ignore[dangerous-triggers]
  pull_request_target:
    types:
      - opened
      - edited
      - synchronize

permissions:
  contents: read

jobs:
  main:
    name: Validate PR title
    runs-on: ubuntu-latest
    steps:
      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}