on:
  push:
    branches:
      - main
  pull_request:
    types: [opened, synchronize, reopened]

jobs:
  build-latex:
    name: Verify SSH keys
    runs-on: alpine
    container:
      image: alpine:latest
    defaults:
      run:
        shell: ash -eo pipefail {0}
    steps:
      - name: Install dependencies
        run: |
          apk add --no-cache nodejs git openssh python3 py3-pip
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          # IMPORTANT! Otherwise, the script cannot see all commits and will assume the last commit is the author of every file.
          fetch-depth: 0
      - name: Create virtualenv and install Python dependencies
        run: |
          python -m venv .venv
          . .venv/bin/activate
          pip install --upgrade GitPython requests
      - name: Run verification script
        run: . .venv/bin/activate && python verify.py