name: qa-required

on:
  push:
    branches:
      - main
  pull_request:

jobs:
  qa-required:
    name: qa-required
    runs-on: ubuntu-latest

    # Phase 1: workflow is present and runnable, but branch protection does not
    # require this check yet. Enable required checks in Phase 2.
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Start project services
        run: docker compose up -d

      - name: Run required QA gates
        run: bin/qa-required.sh