pr_build.yml

name: PR CI

on: [push, pull_request]

permissions:
  contents: read

jobs:
  build:
    env:
      TAMAGO_VERSION: 1.23.1
      TAMAGO: /usr/local/tamago-go/bin/go
      APPLET_PRIVATE_KEY: /tmp/applet.sec
      APPLET_PUBLIC_KEY: /tmp/applet.pub
      LOG_ORIGIN: throwaway.transparency.dev/armored-witness-applet/pr-build/0
      LOG_PRIVATE_KEY: /tmp/log.sec
      LOG_PUBLIC_KEY: /tmp/log.pub
      OS_PRIVATE_KEY1: /tmp/os1.sec
      OS_PUBLIC_KEY1: /tmp/os1.pub
      OS_PRIVATE_KEY2: /tmp/os2.sec
      OS_PUBLIC_KEY2: /tmp/os2.pub
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
    - name: Install tools
      run: |
        wget -q https://github.com/usbarmory/tamago-go/releases/download/tamago-go${TAMAGO_VERSION}/tamago-go${TAMAGO_VERSION}.linux-amd64.tar.gz
        sudo tar -xf tamago-go${TAMAGO_VERSION}.linux-amd64.tar.gz -C /
        sudo apt install protobuf-compiler protoc-gen-go 
    - name: Create throwaway keys
      run: |
        go run github.com/transparency-dev/serverless-log/cmd/generate_keys@HEAD --key_name="DEV-APPLET" --out_priv=${APPLET_PRIVATE_KEY} --out_pub=${APPLET_PUBLIC_KEY}
        go run github.com/transparency-dev/serverless-log/cmd/generate_keys@HEAD --key_name="DEV-LOG" --out_priv=${LOG_PRIVATE_KEY} --out_pub=${LOG_PUBLIC_KEY}
        go run github.com/transparency-dev/serverless-log/cmd/generate_keys@HEAD --key_name="DEV-OS1" --out_priv=${OS_PRIVATE_KEY1} --out_pub=${OS_PUBLIC_KEY1}
        go run github.com/transparency-dev/serverless-log/cmd/generate_keys@HEAD --key_name="DEV-OS2" --out_priv=${OS_PRIVATE_KEY2} --out_pub=${OS_PUBLIC_KEY2}
    - name: Make
      run: |
        DEBUG=1 make trusted_applet