ValidatePullRequest.yml

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json

name: Validate Pull Request

on:
  pull_request:
    branches: [main, "release/**"]
  merge_group:

# Cancels old running job if a new one is triggered (e.g. by a push onto the same branch).
# This will cancel dependent jobs as well, such as dep_rust and dep_fuzzing
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true    

permissions:
  id-token: write
  contents: read

jobs:
  docs-pr:
    runs-on: ubuntu-latest
    outputs:
      docs-only: ${{ steps.docs-only.outputs.result }}
    steps:
      - uses: dorny/paths-filter@v3
        id: changes
        with:
          filters: |
            docs:
              - '**/*.md'
              - '**/*.txt'
            all:
              - '**/*'
      - uses: actions/github-script@v7
        id: docs-only
        with:
          script: |
            let docs_file_count = ${{steps.changes.outputs.docs_count}};
            let all_file_count = ${{steps.changes.outputs.all_count}};
            return all_file_count === docs_file_count;
          result-encoding: string

  rust:
    needs:
      - docs-pr
    uses: ./.github/workflows/dep_rust.yml
    secrets: inherit
    with: 
      docs_only: ${{needs.docs-pr.outputs.docs-only}}

  fuzzing:
    needs:
      - docs-pr
    uses: ./.github/workflows/dep_fuzzing.yml
    with:
      max_total_time: 300 # 5 minutes in seconds
      docs_only: ${{needs.docs-pr.outputs.docs-only}}
    secrets: inherit

  spelling:
    name: spell check with typos
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - name: Spell Check Repo
      uses: crate-ci/typos@master

  #####
  # start build-on-windows
  #####
  build-on-windows:
    needs:
      - docs-pr
    if: ${{needs.docs-pr.outputs.docs-only != 'true'}}
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: true
      matrix:
        build: [windows-debug, windows-release]
        include:
          - build: windows-debug
            os: [self-hosted, Windows, X64, "1ES.Pool=hld-win2022-amd"]
            config: debug
            platform: x64
          - build: windows-release
            os: [self-hosted, Windows, X64, "1ES.Pool=hld-win2022-amd"]
            config: release
            platform: x64
    env:
      RUST_BACKTRACE: FULL

    steps:
      - uses: actions/checkout@v4

      - name: Get system info
        run: |
          echo "cmd /ver"
          cmd /ver
          echo "systeminfo"
          systeminfo

      # Run this so we can use just targets in this workflow
      - uses: hyperlight-dev/ci-setup-workflow@v1.1.0
        with:
          rust-toolchain: "1.81.0"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}


  #####
  # end build-on-windows
  #####

  #####
  # start build-on-linux
  #####
  build-on-linux:
    needs:
      - docs-pr
    if: ${{needs.docs-pr.outputs.docs-only != 'true'}}
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: true
      matrix:
        build:
          [
            linux-kvm-debug,
            linux-kvm-release,
            linux-hyperv-debug,
            linux-hyperv-release,
          ]
        include:
          - build: linux-kvm-debug
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-kvm-amd"]
            config: debug
            platform: x64
            hypervisor: kvm
          - build: linux-kvm-release
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-kvm-amd"]
            config: release
            platform: x64
            hypervisor: kvm
          - build: linux-hyperv-debug
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-mshv-amd"]
            config: debug
            platform: x64
            hypervisor: hyperv
          - build: linux-hyperv-release
            os: [self-hosted, Linux, X64, "1ES.Pool=hld-mshv-amd"]
            config: release
            platform: x64
            hypervisor: hyperv
    env:
      RUST_BACKTRACE: FULL

    steps:
      - uses: actions/checkout@v4

      - name: uname (linux)
        run: |
          echo "uname -a"
          uname -a
          echo "cat /etc/os-release"
          cat /etc/os-release

      - uses: hyperlight-dev/ci-setup-workflow@v1.1.0
        with:
          rust-toolchain: "1.81.0"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Build C Guest Binaries
        run: |
          just build-c-guests ${{ matrix.config }}

  #####
  # end build-on-linux
  #####