Update test-apt-repo.yml

Author: t-aleksander

.github/workflows/test-apt-repo.yml

@@ -1,6 +1,6 @@
 name: Test APT repository
 
-on:
+"on":
   push:
     branches:
       - apt-test
@@ -24,10 +24,17 @@ jobs:
       matrix:
         package: [defguard, defguard-proxy, defguard-gateway]
         component: [release, pre-release]
+        include:
+          - package: defguard
+            github_repo: DefGuard/defguard
+          - package: defguard-proxy
+            github_repo: DefGuard/proxy
+          - package: defguard-gateway
+            github_repo: DefGuard/gateway
 
     steps:
       - name: Install prerequisites
-        run: apt-get update -y && apt-get install -y ca-certificates curl libmnl0
+        run: apt-get update -y && apt-get install -y ca-certificates curl jq libmnl0
 
       - name: Add Defguard GPG key
         run: |
@@ -43,8 +50,35 @@ jobs:
       - name: Update APT cache
         run: apt-get update -y
 
+      - name: Get expected version from GitHub
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if [ "${{ matrix.component }}" = "release" ]; then
+            VERSION=$(curl -sf \
+              -H "Authorization: Bearer $GH_TOKEN" \
+              https://api.github.com/repos/${{ matrix.github_repo }}/releases/latest \
+              | jq -r '.tag_name')
+          else
+            VERSION=$(curl -sf \
+              -H "Authorization: Bearer $GH_TOKEN" \
+              https://api.github.com/repos/${{ matrix.github_repo }}/releases \
+              | jq -r '[.[] | select(.prerelease == true)][0].tag_name')
+          fi
+          VERSION="${VERSION#v}"
+          echo "Expected version: $VERSION"
+          echo "EXPECTED_VERSION=$VERSION" >> $GITHUB_ENV
+
       - name: Install ${{ matrix.package }}
         run: apt-get install -y ${{ matrix.package }}
 
-      - name: Verify ${{ matrix.package }} binary
-        run: ${{ matrix.package }} -V
+      - name: Verify ${{ matrix.package }} version
+        run: |
+          INSTALLED=$(dpkg -s ${{ matrix.package }} | grep '^Version:' | awk '{print $2}')
+          echo "Installed version: $INSTALLED"
+          echo "Expected version:  $EXPECTED_VERSION"
+          if [ "$INSTALLED" != "$EXPECTED_VERSION" ]; then
+            echo "Version mismatch!"
+            exit 1
+          fi
+          ${{ matrix.package }} -V