name: Diagnose GitHub sync

on:
  push:
    branches:
      - main
  workflow_dispatch:

jobs:
  diagnose:
    runs-on: ubuntu-latest
    steps:
      - name: Check GitHub access
        env:
          GH_TOKEN: ${{ secrets.GH_TOKEN }}
        run: |
          set -eu

          REPO="tafakkur/PyNix-Website"
          AUTH="$(printf 'x-access-token:%s' "$GH_TOKEN" | base64 | tr -d '\n')"

          git_auth() {
            git -c http.extraheader="AUTHORIZATION: basic $AUTH" "$@"
          }

          echo "Checking GitHub repository access..."
          git_auth ls-remote \
            "https://github.com/${REPO}.git" refs/heads/main

          echo "Checking source commit..."
          echo "$GITHUB_SHA"

          echo "GitHub read access succeeded."