verify-debs.yml

name: Verify

permissions:
  contents: read

on:
  pull_request:
  push:
    branches:
    - main

concurrency:
  group: >-
    ${{ github.event.inputs.head_ref || github.run_id }}


jobs:
  verify:
    runs-on: ubuntu-24.04
    steps:
    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
      with:
        path: apt
    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
      with:
        repository: envoyproxy/envoy
        depth: 1
        path: envoy
        sparse-checkout: |
          VERSION.txt
        sparse-checkout-cone-mode: false
    - run: |
        VERSION=$(cat VERSION.txt)
        echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
        DEV_COMMIT_ID=$(git ls-remote https://github.com/envoyproxy/envoy refs/heads/main | cut -f1)
        echo "commit=${DEV_COMMIT_ID}" >> "$GITHUB_OUTPUT"
      id: envoy
      working-directory: envoy
    - run: |
        echo "ENVOY: ${{ steps.envoy.outputs.commit }}"
        bazel run --config=ci \
                  --action_env="DEV_COMMIT_ID=${{ steps.envoy.outputs.commit }}" \
                  --host_action_env="DEV_COMMIT_ID=${{ steps.envoy.outputs.commit }}" \
                  :verify_debs
      working-directory: apt