pr.yaml

name: Pull Request Check

on:
    pull_request:
        paths:
            - "*.yaml"

jobs:
    lint:
        runs-on: ubuntu-latest
        steps:
            - name: Checkout
              uses: actions/checkout@v4
            - name: Lint using Wolfictl
              uses: wolfi-dev/actions/wolfictl-lint@main

    build:
        runs-on: ubuntu-latest
        container:
            image: ghcr.io/wolfi-dev/sdk:latest
            options: |
              --cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
        steps:
            - name: Checkout
              uses: actions/checkout@v4

            - name: Generate key
              run: melange keygen

            - name: Look for changed files
              id: changes
              uses: tj-actions/changed-files@v45
              with:
                files_yaml: |
                  melange:
                    - ./*.yaml
            
            - name: Build all packages
              run: |
                for file in ${{ steps.changes.outputs.melange_all_changed_files }}; do
                    if [[ $file == ".yam.yaml" ]]; then
                        continue
                    fi

                    melange build \
                        --arch x86_64 \
                        -r https://packages.wolfi.dev/os \
                        -k https://packages.wolfi.dev/os/wolfi-signing.rsa.pub \
                        -r https://wolfi.shyim.me \
                        -k https://wolfi.shyim.me/php-signing.rsa.pub \
                        --git-repo-url=https://github.com/shyim/wolfi.php \
                        --git-commit=${{ github.sha }} \
                        $file
                done