name: Namespace Leak Check

on:
  pull_request:
    branches: [main, master]
    types: [opened, synchronize, reopened]

permissions:
  contents: read
  pull-requests: read

jobs:
  namespace-leak-check:
    name: "Doctrine v7 §14 — Personal Namespace Fence"
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-depth: 0

      - name: Check for personal namespace leaks
        env:
          PERSONAL_NAMESPACES: betterwithage
          BASE_REF: origin/main
        run: |
          bash scripts/check_namespace_leak.sh --base origin/main