on: pull_request: concurrency: policy permissions: contents: read jobs: verify: uses: attacker/repo/.github/workflows/build.yml@main