ci: verify --version output after build and goreleaser

Author: Arun Philip

.github/workflows/ci-linux.yaml

@@ -38,3 +38,17 @@ jobs:
       run: |
         go build ./...
         go test -v ./...
+
+    - name: Verify --version flag
+      run: |
+        go build -o tsidp-server .
+        VERSION=$(./tsidp-server --version)
+        echo "Version: $VERSION"
+        [ -n "$VERSION" ] || (echo "ERROR: --version produced empty output"; exit 1)
+
+    - name: Verify --version flag
+      run: |
+        go build -o tsidp-server .
+        VERSION=$(./tsidp-server --version)
+        echo "Version: $VERSION"
+        [ -n "$VERSION" ] || (echo "ERROR: --version produced empty output"; exit 1)

.github/workflows/release.yaml

@@ -50,4 +50,16 @@ jobs:
           version: '~> v2'
           args: ${{ steps.goreleaser-args.outputs.args }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      -
+        name: Verify --version flag
+        run: |
+          BINARY=$(find dist -path '*linux*amd64*' -name 'tsidp-server' -type f | head -1)
+          [ -n "$BINARY" ] || (echo "ERROR: could not find linux/amd64 binary in dist/"; exit 1)
+          VERSION=$("$BINARY" --version)
+          echo "Version: $VERSION"
+          [ -n "$VERSION" ] || (echo "ERROR: --version produced empty output"; exit 1)
+          if [ "${GITHUB_EVENT_NAME}" != "pull_request" ]; then
+            EXPECTED="${GITHUB_REF_NAME}"
+            [ "$VERSION" = "$EXPECTED" ] || (echo "ERROR: expected $EXPECTED got $VERSION"; exit 1)
+          fi