Add CI dogfood workflow

Author: machado144

.github/workflows/ci.yaml

@@ -0,0 +1,97 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.24'
+
+      - name: Unit tests
+        run: go test ./...
+
+      - name: Build pipekit
+        run: make build
+
+      - name: Integration tests
+        run: go test ./integration/... -v
+
+      - name: Export env from JSON
+        run: |
+          ./dist/pipekit env from-json --flatten --uppercase-keys --to-github <<'JSON'
+          {
+            "name": "pipekit",
+            "ci": {
+              "platform": "github-actions",
+              "purpose": "dogfood"
+            }
+          }
+          JSON
+
+      - name: Assert exported env in later step
+        run: |
+          ./dist/pipekit assert env-exists NAME CI_PLATFORM CI_PURPOSE
+          test "$NAME" = "pipekit"
+          test "$CI_PLATFORM" = "github-actions"
+          test "$CI_PURPOSE" = "dogfood"
+
+      - name: Export outputs from JSON
+        id: json_outputs
+        run: |
+          ./dist/pipekit env from-json --uppercase-keys --to-github-output <<'JSON'
+          {
+            "artifact": "pipekit",
+            "channel": "ci"
+          }
+          JSON
+
+      - name: Assert exported outputs in later step
+        env:
+          ARTIFACT: ${{ steps.json_outputs.outputs.ARTIFACT }}
+          CHANNEL: ${{ steps.json_outputs.outputs.CHANNEL }}
+        run: |
+          ./dist/pipekit assert env-exists ARTIFACT CHANNEL
+          test "$ARTIFACT" = "pipekit"
+          test "$CHANNEL" = "ci"
+
+      - name: Export cache key
+        id: cache_key
+        run: ./dist/pipekit cache-key from-files go.sum --prefix "go-" --to-github-output cache_key
+
+      - name: Assert cache key output in later step
+        env:
+          CACHE_KEY: ${{ steps.cache_key.outputs.cache_key }}
+        run: |
+          ./dist/pipekit assert env-exists CACHE_KEY
+          case "$CACHE_KEY" in
+            go-*) ;;
+            *) echo "cache key missing go- prefix: $CACHE_KEY"; exit 1 ;;
+          esac
+
+      - name: Dogfood JSON, mask, exec, and summary
+        run: |
+          printf '{"module":"github.com/AxeForging/pipekit","kind":"ci"}\n' > pipekit-ci.json
+          test "$(./dist/pipekit json get pipekit-ci.json --path '.module' --raw)" = "github.com/AxeForging/pipekit"
+          ./dist/pipekit assert json-path --file pipekit-ci.json --path '.kind' --expected "ci"
+          ./dist/pipekit mask github "secret-ci-value"
+          ./dist/pipekit exec --attempts 2 --delay 1s --mask "secret-[a-z-]+" --tee pipekit-ci.log -- sh -c 'echo token=secret-ci-value'
+          ./dist/pipekit summary badge --label "pipekit" --status success --to-github-summary
+          ./dist/pipekit summary section --title "pipekit CI log" --to-github-summary < pipekit-ci.log

.github/workflows/release.yaml

@@ -23,7 +23,7 @@ jobs:
           go-version: '1.24'
 
       - name: Run tests
-        run: go test ./...
+        run: make test-integration
 
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6

Makefile

@@ -1,4 +1,4 @@
-.PHONY: all build clean test lint tidy version release-check
+.PHONY: all build clean test test-integration lint tidy version release-check
 
 GOOS_ARCH := linux/amd64 linux/arm64 linux/386 linux/arm darwin/amd64 darwin/arm64 windows/amd64 windows/arm64 windows/386
 DIST_DIR := dist
@@ -45,6 +45,11 @@ test:
 	go test ./... -v
 	@echo "All tests passed."
 
+test-integration: build
+	@echo "Running integration tests against dist/pipekit..."
+	go test ./integration/... -v
+	@echo "Integration tests passed."
+
 lint:
 	@echo "Running linter..."
 	golangci-lint run --timeout=5m
@@ -71,7 +76,7 @@ tag:
 	git tag -a $(VERSION) -m "Release $(VERSION)"
 	@echo "Tag created. Push with: git push origin $(VERSION)"
 
-release-check: build
+release-check: test-integration
 	@echo "Running tests..."
 	go test ./...
 	@echo "All tests passed. Ready for release $(VERSION)"