name: Tidelift Alignment

on:

push:

paths:

- '.github/workflows/tidelift-alignment.yml'

- 'package.json'

permissions:

contents: read

jobs:

build:

name: Run Tidelift to ensure approved open source packages are in use

runs-on: ubuntu-latest

if: github.repository == 'Automattic/mongoose'

steps:

- name: Checkout

uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

- name: Setup node

uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0

with:

node-version: 22

- name: Alignment

uses: tidelift/alignment-action@8d7700fe795fc01179c1f9fa05b72a089873027d # main

env:

TIDELIFT_API_KEY: ${{ secrets.TIDELIFT_API_KEY }}

TIDELIFT_ORGANIZATION: ${{ secrets.TIDELIFT_ORGANIZATION }}

TIDELIFT_PROJECT: ${{ secrets.TIDELIFT_PROJECT }}