DOC-2277: Warn that BYOC GCP credential rotation needs Support (#625) #94

	---
	name: Check playbook branches
	# Runs on every PR (no paths filter) so it can be a required status check:
	# a required check that is skipped by a paths filter leaves PRs stuck pending.
	# It passes fast when the playbook is unchanged or standard.
	on:
	pull_request:
	push:
	branches: [main]

	jobs:
	check-branches:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Check for non-standard branch references
	run: \|
	# Allowed branch patterns in local-antora-playbook.yml.
	# Any value not matching these is likely a PR branch that
	# must be reverted before merge.
	ALLOWED='main\|HEAD\|v/\\|shared\|site-search\|!v-end-of-life/\'

	# Extract all branch values from the playbook
	BRANCHES=$(grep 'branches:' local-antora-playbook.yml \
	\| sed 's/.branches:[[:space:]]//' \
	\| tr -d "[]'" \
	\| tr ',' '\n' \
	\| sed 's/^[[:space:]]//;s/[[:space:]]$//')

	FAILED=0
	while IFS= read -r branch; do
	[ -z "$branch" ] && continue
	if ! echo "$branch" \| grep -qE "^(${ALLOWED})$"; then
	echo "::error::Non-standard branch reference found: '${branch}'"
	FAILED=1
	fi
	done <<< "$BRANCHES"

	if [ "$FAILED" -eq 1 ]; then
	echo ""
	echo "local-antora-playbook.yml contains non-standard branch references."
	echo "These are used for cross-repo Netlify previews during PR development,"
	echo "but must be reverted to standard values (e.g., 'main') before merging."
	exit 1
	fi

	echo "Playbook OK: all branch references are standard."

Provide feedback