From a0e2cbf307317210309909f9b387a3860b6ff47c Mon Sep 17 00:00:00 2001
From: Rowen S <ro@freedom.press>
Date: Wed, 4 Dec 2024 14:41:18 -0500
Subject: [PATCH] Add github actions workflows

---
 .github/dependabot.yml     | 15 ++++++++++++++
 .github/workflows/ci.yml   | 40 ++++++++++++++++++++++++++++++++++++++
 .github/workstation-ci.yml |  2 ++
 3 files changed, 57 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/ci.yml
 create mode 100644 .github/workstation-ci.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..b84db07
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "all"
+    groups:
+        dependencies:
+          patterns: ["*"]
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..26087d8
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,40 @@
+---
+name: ci
+
+on: [push, pull_request, merge_group]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    container:
+      image: registry.fedoraproject.org/fedora:37
+    steps:
+      - run: dnf install -y git make
+      - uses: actions/checkout@v4
+      - name: Install dependencies
+        run: |
+          make test-deps
+          pip install poetry==1.8.2
+          poetry install --no-ansi
+      - name: Run linters
+        run: |
+          git config --global --add safe.directory '*'
+          make lint
+  build-rpm:
+    runs-on: ubuntu-latest
+    container:
+      image: registry.fedoraproject.org/fedora:37
+    steps:
+      - run: dnf install -y git make
+      - uses: actions/checkout@v4
+      - name: Install dependencies
+        run: |
+          make build-deps
+      - name: Build RPM
+        run: |
+          git config --global --add safe.directory '*'
+          make build-rpm
+      - name: Check reproducibility
+        run: |
+          make test-deps
+          make reprotest
diff --git a/.github/workstation-ci.yml b/.github/workstation-ci.yml
new file mode 100644
index 0000000..e1b019d
--- /dev/null
+++ b/.github/workstation-ci.yml
@@ -0,0 +1,2 @@
+# for <https://github.com/freedomofpress/securedrop-workstation-ci>
+qubes: "4.2"