name: VerifyCompose

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

on:
  workflow_call:
    inputs:
      ref:  # id of input
        description: 'ref to tag e.g. refs/heads/main'
        type: string
        default: 'refs/heads/main'
      tagname:  # id of input
        description: 'tag name (default: latest)'
        default: 'latest'
        type: string


jobs:
  build:
    runs-on: slim
    permissions:
      contents: write

    steps:
    - name: Checkout repository
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
    - name: Verify Compose File
      run: docker compose config -q
    - name: tag latest after success
      if: ${{ github.ref == inputs.ref }}
      id: tag
      run: |
        git tag -f ${{ inputs.tagname }}
        git push --tags -f