check-mirrors.yml

name: Check Mirrors
on:
  schedule: [{ cron: "0 22 * * *" }]
  workflow_dispatch: null
  pull_request: { paths: ["assets/community-mirrors.ziggy"] }
jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@v4

      - name: Install Zig
        # We can't use mlugg/setup-zig, because that Action uses the community mirror list, which
        # this workflow is in the "supply chain" for. Instead, just directly fetch a tarball from
        # ziglang.org. This is **not** a recommended strategy for most users, but rather a special
        # case due to the role this repository plays in maintaining the mirror list.
        run: |
          curl -L 'https://ziglang.org/download/0.15.2/zig-x86_64-linux-0.15.2.tar.xz' | tar -xJ
          mv 'zig-x86_64-linux-0.15.2' zig
          echo "$PWD/zig" >>"$GITHUB_PATH"

      - name: Check Mirrors
        run: zig build --build-file check-mirrors/build.zig
               run -- assets/community-mirrors.ziggy "$GITHUB_STEP_SUMMARY"

  notify-failure:
    runs-on: ubuntu-latest
    needs: [check]
    if: ${{ always() && (github.event_name != 'pull_request') && (needs.check.result == 'failure' || needs.check.result == 'timed_out') }}
    steps:
      - name: Send Notification
        env:
          PUSHOVER_USER: ${{ secrets.MIRROR_CHECK_PUSHOVER_USER }}
          PUSHOVER_TOKEN: ${{ secrets.MIRROR_CHECK_PUSHOVER_TOKEN }}
        run: curl -s
               -F user="$PUSHOVER_USER"
               -F token="$PUSHOVER_TOKEN"
               -F message="Zig download mirror validation failed"
               https://api.pushover.net/1/messages.json