name: Main branch tests

permissions:
  contents: read

on:
  push:
    branches: ['main']

jobs:

  platform-tests:
    uses: ./.github/workflows/platforms.yml

  scorecard:
    uses: ./.github/workflows/scorecard.yml
    secrets: inherit
    permissions:
      id-token: write
      security-events: write

  basic-downstream:
    uses: ./.github/workflows/downstream-basic.yml
    secrets: inherit