name: '🦠 VirusTotal Scan'

on:
    workflow_dispatch:
    push:
      branches:
        - 'main'
      tags:
        - 'v*'

jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - name: '📦 Checkout'
        uses: actions/checkout@v6

      - name: '📦 Set up Go'
        uses: actions/setup-go@v6
        with:
            go-version: '1.26.2'
      - run: go version

      - name: '🦠 Scan PDF files using VT'
        uses: crazy-max/ghaction-virustotal@v5
        with:
          vt_api_key: ${{ secrets.VT_API_KEY }}
          update_release_body: true
          files: |
            ./export/thgtoa.pdf
            ./export/thgtoa-dark.pdf