github.com/grafana/synthetic-monitoring-agent@v0.64.2/.github/workflows/validate_pr.yaml

name: validate pull request

on:
  pull_request:
    branches:
      - main

permissions:
  contents: none
  packages: none

jobs:
  validate:
    name: validate
    strategy:
      matrix:
        runner: [ ubuntu-latest, github-hosted-ubuntu-arm64 ]
        include:
          - runner: ubuntu-latest
            build_catalogue: true
    runs-on: ${{ matrix.runner }}

    permissions:
      contents: read

    container:
      image: ghcr.io/grafana/grafana-build-tools:v1.47.0@sha256:a80098070f2bb1b3c8b74160803c97955c66038a925e8814b91ebbe63f1fd36c
      volumes:
        # This works as long as we are using self-hosted runners.
        #
        # Self-hosted runners have this file which is used to configure
        # buildkitd. The file is injected when the image is created.
        - /etc/buildkitd.toml:/etc/buildkitd.toml
    steps:
      - name: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0
          fetch-tags: true
          persist-credentials: false

      - name: Set up global git config
        run: |
          # The directory where the code has been checked out ends up belonging
          # to a different user, so git complains about permissions. Indicate
          # that it's safe to ignore.
          git config --global --add safe.directory '*'

      - name: Restore Go cache
        id: restore-go-cache
        uses: ./.github/actions/go-cache-restore

      - name: build info
        id: build-info
        run: |
          echo "os=$(go env GOOS)" >> "$GITHUB_OUTPUT"
          echo "arch=$(go env GOARCH)" >> "$GITHUB_OUTPUT"

      - name: ensure dependencies are up-to-date
        run: |
          make deps
          scripts/enforce-clean

      - name: version
        id: version
        run: |
          make version
          echo "value=$(cat dist/version)" >> "$GITHUB_OUTPUT"

      - name: build
        run: make build-native

      - name: Download sm-k6
        run: make sm-k6-native

      - name: lint
        run: make lint

      - name: test
        run: make test

      - name: build packages
        run: make package-native

      - name: test docker build (no browser)
        uses: grafana/shared-workflows/actions/build-push-to-dockerhub@1acd69f48c01d7aef5f209f94048dfeb789026db # build-push-to-dockerhub/v0.2.0
        with:
          push: false
          cache-from: type=local,src=${{ runner.temp }}/.buildx-cache
          cache-to: type=local,dest=${{ runner.temp }}/.buildx-cache,mode=min
          platforms: |-
            ${{ steps.build-info.outputs.os }}/${{ steps.build-info.outputs.arch }}
          tags: |-
            type=raw,value=${{ steps.version.outputs.value }}
            type=sha,prefix=sha-,format=short
            latest
          target: release

      - name: test docker build (browser)
        uses: grafana/shared-workflows/actions/build-push-to-dockerhub@1acd69f48c01d7aef5f209f94048dfeb789026db # build-push-to-dockerhub/v0.2.0
        with:
          push: false
          cache-from: type=local,src=${{ runner.temp }}/.buildx-cache
          cache-to: type=local,dest=${{ runner.temp }}/.buildx-cache,mode=min
          platforms: |-
            ${{ steps.build-info.outputs.os }}/${{ steps.build-info.outputs.arch }}
          tags: |-
            type=raw,value=${{ steps.version.outputs.value }}-browser
            type=sha,prefix=sha-,suffix=-browser,format=short
            latest-browser
          target: with-browser

      # Run the runtime catalogue validation once per CI rather than repeating
      # the same loaded-image test on both matrix legs.
      - name: build browser image for runtime catalogue tests
        if: matrix.build_catalogue
        uses: grafana/shared-workflows/actions/docker-build-push-image@ef27c620a88acc9f3007f30be5e9407324e8975b # docker-build-push-image/v0.3.0
        with:
          registries: dockerhub
          dockerhub-repository: synthetic-monitoring-agent-runtime-catalogue
          push: false
          cache-from: type=local,src=${{ runner.temp }}/.buildx-cache
          cache-to: type=local,dest=${{ runner.temp }}/.buildx-cache,mode=min
          platforms: |-
            ${{ steps.build-info.outputs.os }}/${{ steps.build-info.outputs.arch }}
          tags: |-
            type=raw,value=runtime-catalogue-local
          target: with-browser
          file: Dockerfile.build
          load: true

      - name: build runtime catalogue integration test binary
        if: matrix.build_catalogue
        run: CGO_ENABLED=0 go test -c -o dist/runtime-catalogue-integration.test ./internal/scraper

      - name: run runtime catalogue integration tests
        if: matrix.build_catalogue
        # This runs the browser-capable runtime catalogue tests as a best-effort
        # integration signal while the job shape is still being proven out.
        continue-on-error: true
        run: |
          docker run --rm \
            --entrypoint /catalogue-integration.test \
            --user root \
            -v "${{ github.workspace }}:/work" \
            -v "${{ github.workspace }}/dist/runtime-catalogue-integration.test:/catalogue-integration.test" \
            -w /work/internal/scraper \
            -e HOME=/tmp \
            -e SM_RUNTIME_CATALOGUE_INTEGRATION=1 \
            -e K6_PATH=/usr/libexec/sm-k6/k6-v1 \
            docker.io/synthetic-monitoring-agent-runtime-catalogue:runtime-catalogue-local \
            -test.run TestValidateMetricCatalogueIntegration -test.count=1 -test.v