name: CI
permissions: {}

on:
  pull_request:
    paths:
      - ".github/workflows/ci.yml"
      - "patches/v20*.patch"
      - "resources/**"
      - "scripts/**"
      - "Dockerfile"

jobs:
  docker-build:
    name: Test building web-vault
    permissions:
      packages: write # Needed to upload packages and artifacts
      contents: read
    runs-on: ubuntu-latest
    env:
      # Force docker to output the progress in plain
      BUILDKIT_PROGRESS: plain
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Build and Extract
        shell: bash
        run: |
          make docker-extract

      - name: Generate checksum
        shell: bash
        run: |
          echo "sha256sum: $(sha256sum container_builds/bw_web_vault.tar.gz)"

      - name: "Upload web-vault artifact"
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: web-vault
          compression-level: 0
          path: container_builds/bw_web_vault.tar.gz