name: Build and validate

# PR-only: push to main is covered by deploy.yml, which validates and then
# deploys in one job — running both here too would just duplicate the check.
on:
  pull_request:

jobs:
  build:
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install dependencies
        run: pip install pyyaml jsonschema

      - name: Build and validate every report
        run: python3 scripts/build.py