name: CI

on:
  workflow_dispatch:
  push:
    branches:
      - main
      - '*'
    paths-ignore:
      - '**/*.md'
  pull_request:
    branches:
      - main
    paths-ignore:
      - '**/*.md'

jobs:
  ci:
    name: CI
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - name: Checkout
        uses: actions/checkout@v2

      - name: Refresh module hashsums
        run: make tidy
      - name: Build
        run: make build
        env:
          VERSION: latest

      - name: Generate token
        id: generate_token
        uses: tibdex/github-app-token@v1
        with:
          app_id: ${{ secrets.APP_ID }}
          private_key: ${{ secrets.APP_PRIVATE_KEY }}

      - name: Push
        run: make push
        env:
          VERSION: latest
          AUTH: ${{ steps.generate_token.outputs.token }}

      - name: Test
        run: make test
      - name: Lint
        run: make lint