feat: publish verifiable proxyctl v1

2026-07-17 09:54:08 +08:00
parent 5ec2b1dae1
commit 2b161e86e6
11 changed files with 536 additions and 28 deletions
@@ -0,0 +1,36 @@
+name: hermetic-ci
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+env:
+  GOFLAGS: -mod=readonly
+  GOTOOLCHAIN: local
+
+jobs:
+  test:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          cache: false
+      - name: Download locked modules
+        run: go mod download
+      - name: Formatting
+        run: test -z "$(gofmt -l .)"
+      - name: Hermetic full test suite
+        run: ./scripts/test-hermetic.sh
+      - name: Static analysis
+        run: go vet ./...
+      - name: Documentation contract
+        run: ./scripts/check-docs.sh
+      - name: Reproducible cross-builds and checksums
+        run: ./scripts/test-release.sh
+      - name: Clean-machine verification
+        run: ./scripts/verify-clean-machine.sh