linux.yml

name: Linux CI
on:
  push:
    branches: [main, 'release/1.6']
  pull_request:
  workflow_dispatch:
permissions:
  contents: read
concurrency:
  group: linux-${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
jobs:
  qualification:
    name: Linux / ${{ matrix.architecture }} / ${{ matrix.lane }}
    runs-on: ${{ matrix.runner }}
    timeout-minutes: 60
    strategy:
      fail-fast: false
      matrix:
        lane: [linux, linux-safety]
        architecture: [x86_64, arm64]
        include:
          - architecture: x86_64
            runner: ubuntu-24.04
          - architecture: arm64
            runner: ubuntu-24.04-arm
    container:
      # Official Swift 6.4.0 Ubuntu 24.04 multi-architecture OCI index.
      image: swift@sha256:31d14d727f4451f25e29bac9c42563a098c39ac66415e8bad970f48038e38aca
    env:
      PYTHONDONTWRITEBYTECODE: '1'
    steps:
      - name: Install the CI harness interpreter
        run: |
          apt-get update
          apt-get install --yes --no-install-recommends python3
          python3 --version
          dpkg-query --show python3 python3-minimal
      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
        with:
          persist-credentials: false
          fetch-depth: 0
      - name: Verify the checked-out container workspace
        run: |
          # The image user differs from the checkout owner. Trust this exact
          # ephemeral workspace so Git identity and full-history checks run.
          git config --global --add safe.directory "$GITHUB_WORKSPACE"
          test "$(git rev-parse HEAD)" = "$GITHUB_SHA"
      - run: python3 -B Scripts/ci.py --lane '${{ matrix.lane }}'
      - name: Public composition and reference imports
        if: matrix.lane == 'linux'
        run: python3 -B Scripts/ci.py --lane composition
      - name: Preserve Linux receipts
        if: always()
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
        with:
          name: linux-${{ matrix.architecture }}-${{ matrix.lane }}
          if-no-files-found: error
          retention-days: 30
          path: |
            .build/ci/
            !.build/ci/**/reproduction/extracted/**