ci.yml

on:
  push:
    branches:
      - main
    tags:
      - "[0-9]+"
  pull_request:
    branches:
      - main

name: ci

jobs:
  validate:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Install xorf-generator
        uses: jaxxstorm/action-install-gh-release@v1.10.0
        env:
          ## Allow install into PATH
          ACTIONS_ALLOW_UNSECURE_COMMANDS: true
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          repo: helium/xorf-generator

      - name: Get descriptor path
        id: set_descriptor
        run: |
          echo "descriptor_path=$(jq .report_prefix manifest.json)"  >> $GITHUB_ENV

      - name: Get serial
        id: set_serial
        run: |
          echo "serial=$(jq .serial manifest.json)" >> $GITHUB_ENV

      - name: Download descriptor
        run: wget ${{env.descriptor_path}}descriptor.bin.gz

      - name: Generate signing data
        run: xorf-generator data generate --serial ${{env.serial}}

      - name: Check manifest
        run: xorf-generator manifest verify

      - name: Check filter
        run: xorf-generator filter generate

      - name: Push Release
        uses: softprops/action-gh-release@v1
        if: startsWith(github.ref, 'refs/tags/')
        with:
          files: |
            filter.bin
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}