Detect the supervised package instead of defaulting to it #148

	name: Pull Request Template

	on:
	pull_request:
	# No `paths` filter on purpose. This job is a required status check, and a required
	# check that never runs leaves a pull request blocked rather than passing.
	branches: [ "main" ]
	types: [ opened, edited, reopened, ready_for_review, synchronize ]

	permissions: {}

	concurrency:
	group: pullrequest-template-${{ github.event.pull_request.number }}
	cancel-in-progress: true

	jobs:
	pr-template:
	name: pr-template
	runs-on: ubuntu-latest
	timeout-minutes: 5
	permissions:
	contents: read
	steps:
	- name: Checkout repository
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Set up JDK 21
	uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
	with:
	java-version: '21'
	distribution: 'temurin'

	# The pull request body is untrusted input: on a fork pull request an outside
	# contributor controls it verbatim. It is therefore passed through the environment
	# and read with System.getenv, never interpolated into the shell with ${{ }}, which
	# would be a script injection sink.
	#
	# Run in single-file source-code mode, so there is no build step and no artefact.
	- name: Check the pull request body against the template
	env:
	PR_BODY: ${{ github.event.pull_request.body }}
	run: java .github/scripts/CheckPullRequestTemplate.java

Navigation Menu