name: leak-guard

# Thin caller → the canonical reusable guard in freemkv/.github.
on: [push, pull_request]
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
jobs:
  leak-guard:
    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork
    uses: freemkv/.github/.github/workflows/guard-leak.yml@v1