name: verify

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:

  build:
    runs-on: ubuntu-latest
    steps:
      - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
        with:
          egress-policy: audit

      - name: checkout
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

      - name: setup-go
        uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
        with:
          go-version: 'stable'

      - name: setup-osquery
        run: |
         curl -LO https://pkg.osquery.io/deb/osquery_5.11.0-1.linux_amd64.deb
         sudo dpkg -i osquery_5.11.0-1.linux_amd64.deb

      - name: verify
        run: make verify-ci