on:
  pull_request:
concurrency: policy
permissions:
  contents: read
jobs:
  verify:
    runs-on: ubuntu-24.04
    timeout-minutes: 10
    steps:
      - id: resolve-agent
        run: |
          echo "sha=$(git ls-remote https://github.com/nezhahq/agent.git refs/heads/main | cut -f1)" >> "$GITHUB_OUTPUT"
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
        with:
          repository: nezhahq/agent
          ref: ${{ steps.resolve-agent.outputs.sha }}
          persist-credentials: false