#!/bin/sh
# The two commands from the workflow `skylos cicd init` generates, run per PR branch.
git config --global --add safe.directory '*'
for b in pr-plain pr-inline pr-ignore pr-exclude pr-contract; do
  rm -rf /tmp/r && git clone -q /work /tmp/r 2>/dev/null && cd /tmp/r && git checkout -q $b
  export SKYLOS_POLICY_BASE="$(git merge-base origin/main HEAD)"
  skylos . --danger --quality --ai-defects --secrets --sca --baseline --diff-base origin/main --diff origin/main --json -o skylos-results.json >/dev/null 2>&1
  skylos cicd gate . --input skylos-results.json --diff-base origin/main --summary >/tmp/g.txt 2>&1; rc=$?
  echo "== $b  gate_exit=$rc  $(grep -m1 'Quality Gate' /tmp/g.txt)"
  grep -E 'SKY-D222|ignored|exclude|waiv|suppress' /tmp/g.txt | head -3 | sed 's/^/     /'
  cd /
done