Deploy cleanup run #25

	name: Deploy cleanup run

	# This is a separate workflow which runs after `deploy-cleanup.yml`
	# because that one cannot have write permissions to the fork's target repo
	# due to GitHub Actions restrictions.

	on:
	workflow_run:
	workflows: [ Deploy cleanup ]
	types: [ completed ]

	permissions:
	contents: write

	jobs:
	deploy-cleanup:
	runs-on: ubuntu-latest
	timeout-minutes: 5

	if: github.event.workflow_run.conclusion == 'success'

	steps:
	- name: Download artifact
	uses: actions/github-script@v8
	with:
	script: \|
	const allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
	owner: context.repo.owner,
	repo: context.repo.repo,
	run_id: context.payload.workflow_run.id,
	});
	const matchArtifact = allArtifacts.data.artifacts.filter((artifact) => {
	return artifact.name == "pr_number"
	})[0];
	const download = await github.rest.actions.downloadArtifact({
	owner: context.repo.owner,
	repo: context.repo.repo,
	artifact_id: matchArtifact.id,
	archive_format: 'zip',
	});
	const fs = require('fs');
	const path = require('path');
	const temp = '${{ runner.temp }}/artifacts';
	if (!fs.existsSync(temp)){
	fs.mkdirSync(temp);
	}
	fs.writeFileSync(path.join(temp, 'pr_number.zip'), Buffer.from(download.data));

	- name: Unzip artifact
	run: unzip "${{ runner.temp }}/artifacts/pr_number.zip" -d "${{ runner.temp }}/artifacts"

	- uses: actions/checkout@v5

	- name: Remove internal branch
	run: \|
	pr_number=$(cat "${{ runner.temp }}/artifacts/pr_number")
	git push origin --delete deploy/${pr_number}

Provide feedback