Process-PSModule.yml

name: Process-PSModule

on:
  workflow_dispatch:
  schedule:
    - cron: '0 0 * * *'
  pull_request:
    branches:
      - main
    types:
      - closed
      - opened
      - reopened
      - synchronize
      - labeled

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: write
  pull-requests: write
  statuses: write
  pages: write
  id-token: write

jobs:
  Process-PSModule:
    # SPIKE: pinned to the Process-PSModule branch that adds the 'Environment' input.
    # MariusStorhaug (personal) -> PSModule (org) is CROSS-OWNER, and `secrets: inherit`
    # only works within the same org/enterprise, so we must pass APIKey explicitly. That
    # closes the secrets context, so environment SECRETS cannot flow here (same-org
    # consumers using secrets: inherit do get them). Environment VARIABLES still flow via
    # the vars context once the test jobs bind to the environment.
    uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@spike/environment-support
    secrets:
      APIKey: ${{ secrets.APIKey }}
    with:
      Environment: Testing