name: Tests

on:
  - push
  - pull_request

jobs:
  test:
    name: Go tests
    runs-on: ubuntu-latest
    container:
      image: node:16-bookworm-slim
    steps:
      - name: Get dependencies
        run: >-
          echo 'deb http://deb.debian.org/debian bookworm-backports main' >> /etc/apt/sources.list.d/backports.list &&
          apt-get update &&
          apt-get install -y
          acl
          git
          gcc
          pkg-config
          libwayland-dev
          wayland-protocols/bookworm-backports
          libxcb1-dev
          libacl1-dev
        if: ${{ runner.os == 'Linux' }}

      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup go
        uses: https://github.com/actions/setup-go@v5
        with:
          go-version: '>=1.23.0'

      - name: Go generate
        run: >-
          go generate ./...

      - name: Run tests
        run: >-
          go test ./...

      - name: Build for Linux
        run: >-
          go build -v -ldflags '-s -w
          -X git.ophivana.moe/security/fortify/internal.Version=${{ github.ref_name }}
          -X git.ophivana.moe/security/fortify/internal.Fsu=/usr/bin/fsu
          -X git.ophivana.moe/security/fortify/internal.Finit=/usr/libexec/fortify/finit
          -X main.Fmain=/usr/bin/fortify
          -X main.Fshim=/usr/libexec/fortify/fshim'
          -o bin/ ./... &&
          (cd bin && sha512sum --tag -b * > sha512sums)