name: Sync GitHub mirror metadata

# Scoped workflow: it runs in every repository of an organization. The script
# is a file of TirSystem/github-action (tools/sync_github_metadata.py), fetched
# with a checkout so that it is readable, lintable and tested as a file
# (MIL-004 task 6). The repository is public, so no token is needed.
on:
  push:
    branches: [ main ]
  workflow_dispatch:
  schedule:
    - cron: "17 3 * * *"

jobs:
  sync-metadata:
    permissions:
      contents: read
    runs-on: ubuntu-latest
    steps:
      - name: Fetch the shared script
        uses: actions/checkout@v4
        with:
          repository: TirSystem/github-action
          ref: v1
          path: shared-scripts

      - name: Sync description and topics
        env:
          GITEA_API_URL: ${{ gitea.api_url }}
          GITEA_CREDENTIALS: ${{ secrets.TOKEN_FOR_GITEA }}
          SOURCE_REPOSITORY: ${{ gitea.repository }}
          PAT_FOR_GITHUB: ${{ secrets.PAT_FOR_GITHUB }}
        run: python3 shared-scripts/tools/sync_github_metadata.py