feat: bring SolidSyslog into the build, nothing wired yet #140
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| run: | |
| name: Run (oracle + baseline + measurements + self-check) | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| with: | |
| persist-credentials: false | |
| # Exactly what a developer runs locally: ./run.sh brings up the syslog-ng | |
| # oracle + the public cross image, builds and runs the baseline under QEMU, | |
| # captures the device measurements and whatever the oracle received, and | |
| # self-checks against the frozen baseline. Fails on drift. | |
| - name: ./run.sh | |
| run: bash run.sh | |
| # Surface the combined report right on the run summary page. | |
| - name: Publish run report to job summary | |
| if: always() | |
| run: | | |
| if [ -f build/run-report.md ]; then | |
| cat build/run-report.md >> "$GITHUB_STEP_SUMMARY" | |
| fi | |
| - name: Upload run report + measurements | |
| if: always() | |
| uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| with: | |
| name: run-report | |
| path: | | |
| build/run-report.md | |
| measurements/ | |
| if-no-files-found: ignore |