Verify the job: Resolve a name

1. Save this as .github/workflows/sourcey-agent-readiness-835381d4b74e9898bf64d07201ec0b74cade55d0a42c3358ebdbaa69fc4314f5.yml on your repository's default branch:

   name: "Agent Readiness: Cloudflare 1.1.1.1 Public DNS / Resolve a name"
   
   on:
     schedule:
       - cron: "19 20 27 * *"
     workflow_dispatch:
   
   jobs:
     verify:
       permissions:
         id-token: write
       uses: sourcey/agent-readiness-action/.github/workflows/run.yml@727b296c203d555a699db1ca8466a874611d9d52 # v1.0.6
       with:
         profile: arp_01m4pmsqywp6qy5atxtaz1phm8
         binding: doh-json
       secrets:
         credentials: ${{ secrets.SOURCEY_AGENT_READINESS_835381D4B74E9898BF64D07201EC0B74CADE55D0A42C3358EBDBAA69FC4314F5 }}

2. In Settings → Secrets and variables → Actions, add the repository secret SOURCEY_AGENT_READINESS_835381D4B74E9898BF64D07201EC0B74CADE55D0A42C3358EBDBAA69FC4314F5. This binding needs no credentials, so its value is just:

   {}

3. Open Actions → Agent Readiness: Cloudflare 1.1.1.1 Public DNS / Resolve a name → Run workflow to check the job now. After that it runs once a month on its own, at the day and time in the workflow (UTC), which is this job's own so runs spread out.

The card shows the job verified with the date of the last run that did it. When a run doesn't do the job, the workflow fails, so GitHub tells you, and the run's summary says what failed.

The workflow pins the Action's v1.0.6 release by its full commit. Sourcey accepts runs only from releases it tagged, and only on GitHub-hosted runners. GitHub stops the scheduled runs of a public repository that has gone 60 days without a commit, so use one that sees commits, such as your SDK's.