name: Migration policy
on:
push:
branches:
pull_request:
workflow_dispatch:
permissions:
contents: read
jobs:
policy:
# Dependabot metadata PRs do not consume the self-hosted policy runner.
if: github.event_name != 'pull_request' || github.event.pull_request.user.type != 'Bot'
runs-on:
steps:
- uses: actions/checkout@v7
with:
fetch-depth: 0
- name: Verify migration policies
shell: bash
run: bash ci/migration-policy.sh