name: Proxy Profile Validation

on:
  push:
    branches: ["main", "master", "development"]
    paths:
      - "frontend/**"
      - "ops/profiles/prod/**"
      - "ops/scripts/validate_proxy_profile.sh"
      - ".github/workflows/proxy-profile-validation.yml"
      - "README.md"
      - ".env.example"
      - "ops/.env.example"
  pull_request:
    paths:
      - "frontend/**"
      - "ops/profiles/prod/**"
      - "ops/scripts/validate_proxy_profile.sh"
      - ".github/workflows/proxy-profile-validation.yml"
      - "README.md"
      - ".env.example"
      - "ops/.env.example"
  workflow_dispatch:

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Validate proxy profile and mixed-content guardrails
        run: bash ops/scripts/validate_proxy_profile.sh