pr-build.yaml

name: pr-build

on:
  pull_request:
    types:
      - opened
      - synchronize
      - reopened

permissions:
  packages: write
  contents: read
  statuses: read
  actions: write
  id-token: write

jobs:
  build:
    runs-on: ubuntu-latest
    outputs:
      profiles: ${{ steps.profiles.outputs.matrix }}    
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
        with:
          egress-policy: audit    
      - name: Checkout
        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
      - name: Setup Go
        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
        with:
          go-version: 1.22.x
      - name: build
        run: |
          echo GOBIN $GOBIN
          echo GOPATH $GOPATH
          echo GOMODCACHE $GOMODCACHE
          go install
          echo GOBIN $GOBIN
          echo GOPATH $GOPATH
          echo GOMODCACHE $GOMODCACHE
          
          go list -m -f '{{.Dir}}' tailscale.com
          ln -s $(go list -m -f '{{.Dir}}' tailscale.com) app
          cd app
          CGO_ENABLED=0 go build -x -o derper cmd/derper