name: Check .lock files
on:
    pull_request: null
    push:
        branches:
            - main
jobs:
    lockfiles:
        runs-on: ubuntu-latest
        name: Verify lock file integrity
        steps:

            - name: Clone Kimai
              uses: actions/checkout@v4
              with:
                  persist-credentials: false

            - name: Prevent file change
              uses: xalvarez/prevent-file-change-action@v1
              with:
                  githubToken: ${{ secrets.GITHUB_TOKEN }}
                  pattern: .*\.lock$
                  trustedAuthors: kevinpapst, dependabot