build.yml

# SPDX-FileCopyrightText: Copyright 2024 Siemens AG
#
# SPDX-License-Identifier: MPL-2.0

name: build browser extension

on:
  push:
  workflow_dispatch:

# Sets permissions of the GITHUB_TOKEN to checkout the repository
permissions:
  contents: read
  id-token: write
  attestations: write

env:
  WEB_EXT_VERS: 8.2.0

jobs:
  reuse-and-codestyle:
    runs-on: ubuntu-latest
    steps:
      - name: checkout repository
        uses: actions/checkout@v4

      - uses: actions/setup-python@v5
        with:
          python-version: '3.12.4'

      - name: install dependencies
        run: |
          sudo apt update && sudo apt install -y python3-gi flake8 pylint python3-pydbus
          pip3 install --break-system-packages fsfe-reuse
          git clean -f -d

      - name: execute linters
        run: |
          reuse lint
          flake8
          pylint linux-entra-sso.py

  build-xpi:
    runs-on: ubuntu-latest
    steps:
      - name: checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: install dependencies
        run: |
          sudo apt update && sudo apt install -y make git zip

      - run: make package

      - name: "web-ext lint"
        run: |
          npx web-ext@${{ env.WEB_EXT_VERS }} lint --source-dir build/firefox --self-hosted

      - uses: actions/upload-artifact@v4
        with:
          name: firefox-xpi
          path: |
            build/**/*.xpi

      - uses: actions/upload-artifact@v4
        with:
          name: chrome-zip
          path: |
            build/chrome/

      - name: attest extension artifacts
        uses: actions/attest-build-provenance@v1
        with:
          subject-path: 'build/Linux-Entra-SSO-v*'