procscope/.github/workflows/packaging-quality.yml at master · Mutasem-mk4/procscope · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
name: Packaging Quality

on:
  pull_request:
    paths:
      - 'arch/**'
      - 'debian/**'
      - '.goreleaser.yml'
      - '.github/workflows/packaging-quality.yml'
  push:
    branches: [main, master]
    paths:
      - 'arch/**'
      - 'debian/**'
      - '.goreleaser.yml'
      - '.github/workflows/packaging-quality.yml'
  workflow_dispatch:

permissions:
  contents: read

jobs:
  arch-lint:
    name: Arch package validation
    runs-on: ubuntu-latest
    container:
      image: archlinux:base-devel
    steps:
      - name: Install deps
        run: pacman -Syu --noconfirm git go nodejs namcap

      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Validate .SRCINFO is in sync
        run: |
          useradd -m builduser || true
          cp arch/PKGBUILD /tmp/PKGBUILD
          chown builduser:builduser /tmp/PKGBUILD
          su builduser -c "cd /tmp && makepkg --printsrcinfo > /tmp/generated.SRCINFO"
          diff -u /tmp/generated.SRCINFO arch/.SRCINFO

      - name: Run namcap checks
        run: |
          cp arch/PKGBUILD /tmp/PKGBUILD
          chown builduser:builduser /tmp/PKGBUILD
          su builduser -c "cd /tmp && makepkg --nobuild --nodeps"
          namcap /tmp/PKGBUILD || true

  debian-lint:
    name: Debian metadata validation
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      - name: Install packaging tools
        run: |
          sudo apt-get update
          sudo apt-get install -y devscripts lintian

      - name: Validate changelog and control
        run: |
          dpkg-parsechangelog >/dev/null
          grep -q "^Standards-Version:" debian/control

      - name: Run static lint checks
        run: |
          lintian -i --pedantic --no-tag-display-limit debian/* || true