#!/usr/bin/env bash
set -euo pipefail
while read -r old new ref; do
    [ "$ref" = refs/heads/main ] || { echo 'Only main may be deployed'; exit 1; }
done