name: SPEC file check

on:  # yamllint disable-line rule:truthy
  pull_request:
    branches:
      - "*"
  push:
    branches:
      - main

jobs:
  check-spec-images-deps:
    name: "🔍 Check spec file osbuild/images dependencies"
    runs-on: ubuntu-latest
    container: registry.fedoraproject.org/fedora:latest
    env:
      # workaround for expired cert at source of indirect dependency
      # (go.opencensus.io/trace)
      GOPROXY: "https://proxy.golang.org,direct"

    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Install dependencies
        shell: bash
        run: |
          # we have the same build-deps as the images library
          curl -sL https://raw.githubusercontent.com/osbuild/images/refs/heads/main/test/scripts/install-dependencies | bash

      - name: Vendor dependencies
        run: go mod vendor

      - name: Check dependencies in spec file
        uses: osbuild/images@check-spec-deps-action