From a9c672ce5021c138d67aa48b8898fb7fcfa33616 Mon Sep 17 00:00:00 2001
From: Marco Pfatschbacher <marco@graylog.com>
Date: Wed, 6 Dec 2023 17:35:24 +0000
Subject: [PATCH] Add github workflow for sidecar build

---
 .github/workflows/pr-build.yml | 68 ++++++++++++++++++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 .github/workflows/pr-build.yml

diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml
new file mode 100644
index 0000000..4084f34
--- /dev/null
+++ b/.github/workflows/pr-build.yml
@@ -0,0 +1,68 @@
+on: push
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout sidecar project
+        uses: actions/checkout@v4
+
+      - name: Setup Go environment
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.21'
+
+      - name: "compile"
+        run: |
+          go version
+          go mod vendor
+          make test
+          make build-all
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USER }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Sign Windows binaries
+        run: >
+          docker run --rm
+          -e "CODESIGN_USER=$CODESIGN_USER"
+          -e "CODESIGN_PASS=$CODESIGN_PASS"
+          -e "CODESIGN_TOTP_SECRET=$CODESIGN_TOTP_SECRET"
+          -e "CODESIGN_CREDENTIAL_ID=$CODESIGN_CREDENTIAL_ID"
+          -v $(pwd):/home/jenkins
+          graylog/internal-codesigntool:latest
+          make sign-binaries
+        env:
+          CODESIGN_USER: ${{ secrets.CODESIGN_USER }}
+          CODESIGN_PASS: ${{ secrets.CODESIGN_PASS }}
+          CODESIGN_TOTP_SECRET: ${{ secrets.CODESIGN_TOTP_SECRET }}
+          CODESIGN_CREDENTIAL_ID: ${{ secrets.CODESIGN_CREDENTIAL_ID }}
+
+      - name: Build packages
+        run: docker run --rm -v $(pwd):/home/jenkins torch/jenkins-fpm-cook-root:latest make package-all
+
+      - name: Sign Windows Installer
+        run: >
+          docker run --rm
+          -e "CODESIGN_USER=$CODESIGN_USER"
+          -e "CODESIGN_PASS=$CODESIGN_PASS"
+          -e "CODESIGN_TOTP_SECRET=$CODESIGN_TOTP_SECRET"
+          -e "CODESIGN_CREDENTIAL_ID=$CODESIGN_CREDENTIAL_ID"
+          -v $(pwd):/home/jenkins
+          graylog/internal-codesigntool:latest
+          make sign-windows-installer
+        env:
+          CODESIGN_USER: ${{ secrets.CODESIGN_USER }}
+          CODESIGN_PASS: ${{ secrets.CODESIGN_PASS }}
+          CODESIGN_TOTP_SECRET: ${{ secrets.CODESIGN_TOTP_SECRET }}
+          CODESIGN_CREDENTIAL_ID: ${{ secrets.CODESIGN_CREDENTIAL_ID }}
+
+        
+