feat(production): add attestation and replay HA gates #8
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Proto Consistency | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - "**/*.proto" | |
| - "**/*.pb.go" | |
| - "Makefile" | |
| pull_request: | |
| branches: | |
| - main | |
| paths: | |
| - "**/*.proto" | |
| - "**/*.pb.go" | |
| - "Makefile" | |
| permissions: | |
| contents: read | |
| jobs: | |
| checkproto: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Install Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: 1.26.x | |
| - name: Set up protoc | |
| run: | | |
| PROTOC_VERSION=33.1 | |
| PROTOC_GEN_VERSION=v1.36.11 | |
| PROTOC_GRPC_VERSION=v1.6.0 | |
| # Download and install protoc | |
| PROTOC_ZIP=protoc-$PROTOC_VERSION-linux-x86_64.zip | |
| curl -0L -o $PROTOC_ZIP https://github.com/protocolbuffers/protobuf/releases/download/v$PROTOC_VERSION/$PROTOC_ZIP | |
| unzip -o $PROTOC_ZIP -d protoc3 | |
| sudo mv protoc3/bin/* /usr/local/bin/ | |
| sudo mv protoc3/include/* /usr/local/include/ | |
| rm -rf $PROTOC_ZIP protoc3 | |
| # Install protoc-gen-go and protoc-gen-go-grpc | |
| go install google.golang.org/protobuf/cmd/protoc-gen-go@$PROTOC_GEN_VERSION | |
| go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@$PROTOC_GRPC_VERSION | |
| # Add protoc to the PATH | |
| export PATH=$PATH:/usr/local/bin/protoc | |
| - name: Verify generated protobuf files | |
| run: | | |
| git ls-files '*.pb.go' > /tmp/generated-protobuf-files.txt | |
| while IFS= read -r p; do | |
| mv "$p" "$p.tmp" | |
| done < /tmp/generated-protobuf-files.txt | |
| make protoc | |
| while IFS= read -r p; do | |
| if ! cmp -s "$p" "$p.tmp"; then | |
| echo "Proto file and generated Go file $p are out of sync!" | |
| exit 1 | |
| fi | |
| done < /tmp/generated-protobuf-files.txt |