name: checkout canary
on:
  push:
    branches: [trunk]
  workflow_dispatch:
jobs:
  checkout:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Verify checkout
        env:
          EXPECTED_SHA: ${{ shithub.sha }}
        run: |
          test -f go.mod
          test "$(git rev-parse HEAD)" = "$EXPECTED_SHA"
          bash scripts/lint-migration-versions.sh