name: Buildchain recovery
on:
  workflow_dispatch:
    inputs:
      attempt:
        description: Exact Buildchain attempt to recover
        required: true
        type: string
      runtime-ref:
        description: Optional repaired runtime
        required: false
        type: string
permissions:
  contents: read
jobs:
  buildchain:
    uses: kungfu-systems/buildchain/.github/workflows/public-ops-recover.yml@v4
    with:
      attempt: ${{ inputs.attempt }}
      runtime-ref: ${{ inputs.runtime-ref }}
    secrets: inherit
    permissions:
      actions: write
      attestations: write
      checks: write
      contents: write
      discussions: write
      id-token: write
      pull-requests: write
      statuses: write