mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-10-26 21:52:52 +08:00
81 lines
3.7 KiB
Bash
81 lines
3.7 KiB
Bash
#!/bin/sh
|
|
|
|
set -eu
|
|
|
|
workflow=.github/workflows/release.yml
|
|
readme=README.md
|
|
sdk_runner=.github/scripts/build-openwrt-package.sh
|
|
sdk_build=.github/scripts/openwrt-sdk-build.sh
|
|
build_job="$(sed -n '/^ build:/,/^ release:/p' "$workflow")"
|
|
release_body="$(sed -n '/^ body: |/,$p' "$workflow")"
|
|
|
|
printf '%s\n' "$build_job" | grep -F 'path: luci-app-tailscale' >/dev/null
|
|
printf '%s\n' "$build_job" | grep -F 'if [[ -d logs ]]; then' >/dev/null
|
|
grep -F 'name: Verify release tag matches package version' "$workflow" >/dev/null
|
|
grep -F 'GITHUB_REF_NAME' "$workflow" >/dev/null
|
|
grep -F 'PKG_VERSION:=' "$workflow" >/dev/null
|
|
grep -F "luci-i18n-tailscale-zh-cn_*.ipk" "$workflow" >/dev/null
|
|
grep -F "luci-i18n-tailscale-zh-tw_*.ipk" "$workflow" >/dev/null
|
|
grep -F "luci-i18n-tailscale-zh-cn-*.apk" "$workflow" >/dev/null
|
|
grep -F "luci-i18n-tailscale-zh-tw-*.apk" "$workflow" >/dev/null
|
|
grep -F 'expected exactly one artifact' "$workflow" >/dev/null
|
|
grep -E 'softprops/action-gh-release@[0-9a-f]{40}' "$workflow" >/dev/null
|
|
grep -F 'generate_release_notes: true' "$workflow" >/dev/null
|
|
if grep -F 'softprops/action-gh-release@v2' "$workflow" >/dev/null; then
|
|
printf '%s\n' 'release action must be pinned to an immutable commit' >&2
|
|
exit 1
|
|
fi
|
|
|
|
check_install_text() {
|
|
label="$1"
|
|
text="$2"
|
|
if printf '%s\n' "$text" | grep -F -- '--force-overwrite' >/dev/null; then
|
|
printf '%s\n' "$label must not recommend force-overwrite for normal installation" >&2
|
|
exit 1
|
|
fi
|
|
if printf '%s\n' "$text" | grep -F '/tmp/luci-*-tailscale*' >/dev/null; then
|
|
printf '%s\n' "$label must not install every translation package through a broad wildcard" >&2
|
|
exit 1
|
|
fi
|
|
printf '%s\n' "$text" | grep -F '/tmp/luci-app-tailscale_' >/dev/null
|
|
printf '%s\n' "$text" | grep -F '/tmp/luci-app-tailscale-' >/dev/null
|
|
printf '%s\n' "$text" | grep -F '/tmp/luci-i18n-tailscale-zh-cn_' >/dev/null
|
|
printf '%s\n' "$text" | grep -F '/tmp/luci-i18n-tailscale-zh-cn-' >/dev/null
|
|
printf '%s\n' "$text" | grep -F '/tmp/luci-i18n-tailscale-zh-tw_' >/dev/null
|
|
printf '%s\n' "$text" | grep -F '/tmp/luci-i18n-tailscale-zh-tw-' >/dev/null
|
|
}
|
|
check_install_text "$readme" "$(cat "$readme")"
|
|
check_install_text "$workflow release body" "$release_body"
|
|
grep -F 'apk add --allow-untrusted' "$readme" >/dev/null
|
|
printf '%s\n' "$release_body" | grep -F 'apk add --allow-untrusted' >/dev/null
|
|
|
|
grep -F 'V: s' "$workflow" >/dev/null
|
|
grep -F 'name: Write build failure summary' "$workflow" >/dev/null
|
|
grep -F '>> "$GITHUB_STEP_SUMMARY"' "$workflow" >/dev/null
|
|
grep -F 'name: Upload build diagnostics' "$workflow" >/dev/null
|
|
grep -F 'if: failure()' "$workflow" >/dev/null
|
|
grep -F 'logs/**' "$workflow" >/dev/null
|
|
grep -E 'sdk_arch: x86_64-24\.10\.5@sha256:[0-9a-f]{64}' "$workflow" >/dev/null
|
|
grep -E 'sdk_arch: x86_64@sha256:[0-9a-f]{64}' "$workflow" >/dev/null
|
|
if grep -Eq 'sdk_arch: x86_64(-24\.10\.5)?$' "$workflow"; then
|
|
printf '%s\n' 'release SDK images must be pinned by digest' >&2
|
|
exit 1
|
|
fi
|
|
|
|
grep -F 'bash luci-app-tailscale/.github/scripts/build-openwrt-package.sh' "$workflow" >/dev/null
|
|
grep -F 'docker pull "$SDK_IMAGE"' "$sdk_runner" >/dev/null
|
|
grep -F 'docker run --rm' "$sdk_runner" >/dev/null
|
|
grep -F -- '--volume "$ARTIFACTS_DIR:/feed"' "$sdk_runner" >/dev/null
|
|
if grep -F -- '--volume "$PACKAGE_FEED_DIR:/feed"' "$sdk_runner" >/dev/null; then
|
|
printf '%s\n' 'the OpenWrt feed mount must contain the package directory, not point at the package itself' >&2
|
|
exit 1
|
|
fi
|
|
grep -F './scripts/feeds update -a' "$sdk_build" >/dev/null
|
|
grep -F 'package/$PACKAGE_NAME/compile' "$sdk_build" >/dev/null
|
|
if grep -F 'gh-action-sdk@' "$workflow" >/dev/null; then
|
|
printf '%s\n' 'the release build must not depend on a composite SDK action with mutable nested actions' >&2
|
|
exit 1
|
|
fi
|
|
|
|
printf '%s\n' 'release workflow diagnostics test passed'
|