refactor(fortios): modernize the native wrapper and bundled runtime workflow #2

	name: Repository Hygiene

	# No path filters, on purpose.
	#
	# Every other workflow here is path-filtered for runner cost. This boundary must
	# hold for every pull request, including one whose only change is generated or
	# secret material: that is exactly the change a path filter could be used to
	# smuggle past CI. The job is cheap (Node built-ins only, no dependency install).
	#
	# .gitignore is developer convenience. This gate reads `git ls-files`, so
	# force-added files (`git add -f`) and already-tracked generated content are
	# still caught.

	permissions:
	contents: read

	on:
	pull_request:
	push:
	branches:
	- main
	workflow_dispatch:

	jobs:
	repo-hygiene:
	runs-on: ubuntu-latest
	timeout-minutes: 10
	steps:
	- name: Check out repository
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
	with:
	persist-credentials: false
	fetch-depth: 1

	- name: Verify tracked-tree hygiene
	run: node tools/assert-repo-hygiene.mjs

Navigation Menu