test-package-create.yml

name: Test Package Create Checksums

on:
  pull_request:
  merge_group:

permissions:
  contents: read

concurrency:
  group: package-create-${{ github.ref }}
  cancel-in-progress: true

jobs:
  test-checksums:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
        with:
          go-version-file: go.mod

      - name: Build Zarf
        run: make build

      - name: Build examples
        run: make build-examples ARCH=amd64

      - name: Compare checksums
        run: |
          set -e

          for f in hack/examples-checksums/*.txt
          do 
            NAME=$(basename $f .txt)
            CHECKSUM=$(tar Oxf build/$NAME.tar.zst checksums.txt | grep -v sboms.tar)
            EXPECTED_CHECKSUM=$(cat $f | grep -v sboms.tar)
            if [[ "$CHECKSUM" != "$EXPECTED_CHECKSUM" ]]
            then
              echo "Package $f does not have expected checksum."
              echo "$CHECKSUM"
              echo "-----"
              echo "$EXPECTED_CHECKSUM"
              exit 1
            fi
          done