r2-credentials-check.yml

name: R2 credentials check

# Manual only, and deliberately separate from publish.yml - this is a
# diagnostic tool for confirming the R2_* repository secrets are valid, not
# part of the regular test suite or the publish path. Read-only: it only
# calls head_bucket, so it never writes or lists bucket contents and is safe
# to run from any branch.
on:
  workflow_dispatch:

jobs:
  check:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: pipeline
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-python@v5
        with:
          python-version: "3.14"

      - name: Install dependencies
        run: pip install boto3

      - name: Check R2 connectivity
        env:
          R2_ENDPOINT_URL: ${{ secrets.R2_ENDPOINT_URL }}
          R2_BUCKET: ${{ secrets.R2_BUCKET }}
          R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
          R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
        run: python check_r2_connection.py