mirror of
https://github.com/freemkv/freemkv-unlock.git
synced 2026-10-07 18:13:11 +00:00
Matthew Jackson
e7490240a1
freemkv-unlock had no automated checks at all: no lint, no tests, no build on any OS but the one a developer happened to be sitting at. It is the base of the dependency graph — libfreemkv path-deps it, bdemu path-deps it with the emulation feature, and the rest pull it in transitively — so a break here takes all seven other repos down, and until now the first machine to notice would have been the release workflow. Full OS matrix, matching libfreemkv's: lint and test on Linux, plus macOS and Windows building the tests (not `cargo check`, which skips codegen and never compiles test-only code). The `emulation` feature gets its own test run. It is off by default and it is the face bdemu builds against, so nothing was compiling it. Also adds the leak-guard workflow the other public repos already carry.
36 lines
1.3 KiB
YAML
36 lines
1.3 KiB
YAML
name: leak-guard
|
|
|
|
# Self-contained public-repo leak gate. Public CI cannot reach the private
|
|
# tooling, so this encodes only the generic net: internal-infra references,
|
|
# tracked CLAUDE.md/.claude paths, and AI-attribution in commit messages.
|
|
# No project-specific reverse-engineering vocabulary lives here.
|
|
|
|
on: [push, pull_request]
|
|
|
|
jobs:
|
|
leak-guard:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Compute commit range
|
|
id: range
|
|
run: |
|
|
if [ "${{ github.event_name }}" = "pull_request" ]; then
|
|
base="${{ github.event.pull_request.base.sha }}"
|
|
head="${{ github.event.pull_request.head.sha }}"
|
|
echo "range=$base..$head" >> "$GITHUB_OUTPUT"
|
|
else
|
|
before="${{ github.event.before }}"
|
|
after="${{ github.sha }}"
|
|
# New branch / first push: github.event.before is all-zeros.
|
|
if [ -z "$before" ] || [ "$before" = "0000000000000000000000000000000000000000" ]; then
|
|
echo "range=$after" >> "$GITHUB_OUTPUT"
|
|
else
|
|
echo "range=$before..$after" >> "$GITHUB_OUTPUT"
|
|
fi
|
|
fi
|
|
- name: Run leak-guard
|
|
run: bash ci/leak-guard.sh "${{ steps.range.outputs.range }}"
|