# Owned by grafana-release-guild
# Intended to be dropped into the base repo, Ex: grafana/grafana
name: Sync to mirror
run-name: sync-to-mirror-${{ github.ref_name }}
on:
  workflow_dispatch:
  push:
    branches:
      - "main"
      - "v*.*.*"
      - "release-*"

# This is run after the pull request has been merged, so we'll run against the target branch
jobs:
  trigger_downstream_patch_mirror:
    concurrency: patch-mirror-${{ github.ref_name }}
    uses: grafana/security-patch-actions/.github/workflows/mirror-branch-and-apply-patches.yml@main
    if: github.repository == 'grafana/grafana'
    with:
      ref: "${{ github.ref_name }}" # this is the target branch name, Ex: "main"
      src_repo: "${{ github.repository }}"
      dest_repo: "${{ github.repository }}-security-mirror"
      patch_repo: "${{ github.repository }}-security-patches"
    secrets: inherit