ci.yaml

name: ci

on:
  push:
    branches:
      - 'main'
  pull_request: {}
  # allow manual runs:
  workflow_dispatch: {}

jobs:
  ci:
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/tillitis/tkey-builder:4
    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          # fetch-depth: 0
          persist-credentials: false

      - name: fix
        # https://github.com/actions/runner-images/issues/6775
        run: |
          git config --global --add safe.directory "$GITHUB_WORKSPACE"

      - name: make
        run: make

      - name: check fmt of c code
        run: make checkfmt

      - name: check for SPDX tags
        run: ./tools/spdx-ensure

      - name: Archive
        uses: actions/upload-artifact@v4
        with:
          name: tkey-libs
          retention-days: 2
          path: |
            README-DIST.txt
            app.lds
            LICENSE
            include/*
            *.a
            monocypher/*.h
            monocypher/LICENSE

  reuse-compliance-check:
    runs-on: ubuntu-latest
    steps:
    - name: Checkout
      uses: actions/checkout@v4

    - name: REUSE Compliance Check
      uses: fsfe/reuse-action@v4
      with:
        args: lint