DO-NOT-MERGE: ci: build debian package in CI #95

	# SPDX-FileCopyrightText: Copyright 2024 Siemens AG
	#
	# SPDX-License-Identifier: MPL-2.0

	name: build browser extension

	on:
	push:
	workflow_dispatch:

	# Sets permissions of the GITHUB_TOKEN to checkout the repository
	permissions:
	contents: read
	id-token: write
	attestations: write

	env:
	WEB_EXT_VERS: 8.2.0

	jobs:
	reuse-and-codestyle:
	runs-on: ubuntu-latest
	steps:
	- name: checkout repository
	uses: actions/checkout@v4

	- uses: actions/setup-python@v5
	with:
	python-version: '3.12.4'

	- name: install dependencies
	run: \|
	sudo apt update && sudo apt install -y python3-gi flake8 pylint python3-pydbus
	pip3 install --break-system-packages fsfe-reuse
	git clean -f -d

	- name: execute linters
	run: \|
	reuse lint
	flake8
	pylint linux-entra-sso.py

	build-xpi:
	runs-on: ubuntu-latest
	steps:
	- name: checkout repository
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: install dependencies
	run: \|
	sudo apt update && sudo apt install -y make git zip

	- run: make package deb

	- name: "web-ext lint"
	run: \|
	npx web-ext@${{ env.WEB_EXT_VERS }} lint --source-dir build/firefox --self-hosted

	- uses: actions/upload-artifact@v4
	with:
	name: firefox-xpi
	path: \|
	build/*/.xpi

	- uses: actions/upload-artifact@v4
	with:
	name: chrome-zip
	path: \|
	build/chrome/

	- uses: actions/upload-artifact@v4
	with:
	name: deb
	path: \|
	pkgs/linux-entra-sso_*.deb

	- name: attest extension artifacts
	uses: actions/attest-build-provenance@v1
	with:
	subject-path: \|
	build/Linux-Entra-SSO-v*
	pkgs/linux-entra-sso_*.deb

Provide feedback