ci: check for unclean patches

edgelesssys · Nov 4, 2024 · 6a700c2 · 6a700c2
1 parent d251991
commit 6a700c2
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/.github/workflows/static.yml b/.github/workflows/static.yml
@@ -68,3 +68,34 @@ jobs:
       - name: Run golangci-lint
         run: |
           nix run .#scripts.golangci-lint
+
+  clean-patches:
+    runs-on: ubuntu-22.04
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          path: contrast
+      - uses: ./contrast/.github/actions/setup_nix
+        with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
+          cachixToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          repository: kata-containers/kata-containers
+      - name: Check out Kata
+        run: |
+          git clone --depth 1 -b "$(nix eval --raw .#kata.kata-runtime.version)" https://github.com/kata-containers/kata-containers.git kata
+      - name: Apply patches
+        working-directory: kata
+        run: |
+          git config --global user.email "[email protected]"
+          git config --global user.name "Actions Bot"
+          git am --no-3way ../contrast/packages/by-name/kata/kata-runtime/*.patch
+          git format-patch -N --no-signature --zero-commit -o ../contrast/packages/by-name/kata/kata-runtime/ "$(nix eval --raw .#kata.kata-runtime.version)"
+
+          git clone --depth 1 -b "$(nix eval --raw .#kata.kata-runtime.version)" https://github.com/kata-containers/kata-containers.git kata
+      - name: Check for diff
+        working-directory: contrast
+        run: |
+          git diff --exit-code