check.yml

name: Check
on:
  pull_request: ~
  push:
    branches:
    - main

permissions: read-all

jobs:
  build:
    name: Build
    runs-on: ubuntu-24.04
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4.2.0
    - name: Install Go
      uses: actions/setup-go@v5.0.2
      with:
        go-version-file: go.mod
    - name: Verify action checksums
      env:
        JOB: ${{ github.job }}
        WORKFLOW: ${{ github.workflow_ref }}
      run: |
        WORKFLOW=$(echo "$WORKFLOW" | cut -d '@' -f 1 | cut -d '/' -f 3-5)
        go run ./cmd/ghasum verify -cache /home/runner/work/_actions -no-evict -offline "$WORKFLOW:$JOB"
    - name: Build binary
      run: go run tasks.go build
  dogfeed:
    name: Dogfeed
    runs-on: ubuntu-24.04
    needs:
    - test
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4.2.0
    - name: Install Go
      uses: actions/setup-go@v5.0.2
      with:
        go-version-file: go.mod
    - name: Verify action checksums
      env:
        JOB: ${{ github.job }}
        WORKFLOW: ${{ github.workflow_ref }}
      run: |
        WORKFLOW=$(echo "$WORKFLOW" | cut -d '@' -f 1 | cut -d '/' -f 3-5)
        go run ./cmd/ghasum verify -cache /home/runner/work/_actions -no-evict -offline "$WORKFLOW:$JOB"
    - name: Uninitialize ghasum
      run: rm -f .github/workflows/gha.sum
    - name: Run on this repository
      run: |
        go run ./cmd/ghasum init
        go run ./cmd/ghasum verify
  format:
    name: Format
    runs-on: ubuntu-24.04
    needs:
    - build
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4.2.0
    - name: Install Go
      uses: actions/setup-go@v5.0.2
      with:
        go-version-file: go.mod
    - name: Verify action checksums
      env:
        JOB: ${{ github.job }}
        WORKFLOW: ${{ github.workflow_ref }}
      run: |
        WORKFLOW=$(echo "$WORKFLOW" | cut -d '@' -f 1 | cut -d '/' -f 3-5)
        go run ./cmd/ghasum verify -cache /home/runner/work/_actions -no-evict -offline "$WORKFLOW:$JOB"
    - name: Check source code formatting
      run: go run tasks.go format-check
  reproducible:
    name: Reproducible build
    runs-on: ubuntu-24.04
    needs:
    - build
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4.2.0
    - name: Install Go
      uses: actions/setup-go@v5.0.2
      with:
        go-version-file: go.mod
    - name: Verify action checksums
      env:
        JOB: ${{ github.job }}
        WORKFLOW: ${{ github.workflow_ref }}
      run: |
        WORKFLOW=$(echo "$WORKFLOW" | cut -d '@' -f 1 | cut -d '/' -f 3-5)
        go run ./cmd/ghasum verify -cache /home/runner/work/_actions -no-evict -offline "$WORKFLOW:$JOB"
    - name: Check reproducibility
      run: go run tasks.go reproducible
  test:
    name: Test
    runs-on: ubuntu-24.04
    needs:
    - build
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4.2.0
    - name: Install Go
      uses: actions/setup-go@v5.0.2
      with:
        go-version-file: go.mod
    - name: Verify action checksums
      env:
        JOB: ${{ github.job }}
        WORKFLOW: ${{ github.workflow_ref }}
      run: |
        WORKFLOW=$(echo "$WORKFLOW" | cut -d '@' -f 1 | cut -d '/' -f 3-5)
        go run ./cmd/ghasum verify -cache /home/runner/work/_actions -no-evict -offline "$WORKFLOW:$JOB"
    - name: Run tests
      run: go run tasks.go coverage
  vet:
    name: Vet
    runs-on: ubuntu-24.04
    needs:
    - build
    steps:
    - name: Checkout repository
      uses: actions/checkout@v4.2.0
    - name: Install Go
      uses: actions/setup-go@v5.0.2
      with:
        go-version-file: go.mod
    - name: Verify action checksums
      env:
        JOB: ${{ github.job }}
        WORKFLOW: ${{ github.workflow_ref }}
      run: |
        WORKFLOW=$(echo "$WORKFLOW" | cut -d '@' -f 1 | cut -d '/' -f 3-5)
        go run ./cmd/ghasum verify -cache /home/runner/work/_actions -no-evict -offline "$WORKFLOW:$JOB"
    - name: Vet source code
      run: go run tasks.go vet