chore: publish maintainer hardening and community evidence #2

	name: PatchGate Shadow

	on:
	pull_request_target:
	types: [opened, synchronize, reopened]
	merge_group:
	types: [checks_requested]

	concurrency:
	group: patchgate-shadow-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	permissions:
	checks: write
	pull-requests: read
	contents: read

	jobs:
	evaluate:
	name: PatchGate Review-Readiness Shadow Gate
	runs-on: ubuntu-latest
	steps:
	- name: Checkout trusted base repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	ref: ${{ github.base_ref }}
	persist-credentials: false

	- name: Setup Node.js
	uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
	with:
	node-version: 20.x
	cache: 'npm'

	- name: Install dependencies & Build
	run: \|
	npm ci
	npm run build
	npm run bundle:action

	- name: Run PatchGate in Shadow Mode
	uses: ./.github
	with:
	fail-on: never
	create-check-run: true
	github-token: ${{ secrets.GITHUB_TOKEN }}

Navigation Menu