dotnet__skills/.github/workflows/skill-check.yml

name: skill-check

on:
  pull_request:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
        with:
          persist-credentials: false

      - name: Cache validator archive
        id: cache-validator
        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v4
        with:
          path: skill-validator-dist.tar.gz
          key: skill-validator-${{ runner.os }}-${{ hashFiles('eng/skill-validator/src/**', 'eng/skill-validator/Directory.Build.props', 'global.json') }}

      - name: Setup .NET SDK
        if: steps.cache-validator.outputs.cache-hit != 'true'
        uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v5
        with:
          global-json-file: global.json

      - name: Build skill-validator
        if: steps.cache-validator.outputs.cache-hit != 'true'
        run: dotnet publish eng/skill-validator/src/SkillValidator.csproj

      - name: Create validator archive
        if: steps.cache-validator.outputs.cache-hit != 'true'
        run: tar -czf skill-validator-dist.tar.gz -C artifacts/publish/SkillValidator/release .

      - name: Extract validator
        if: steps.cache-validator.outputs.cache-hit == 'true'
        run: |
          mkdir -p artifacts/publish/SkillValidator/release
          tar -xzf skill-validator-dist.tar.gz -C artifacts/publish/SkillValidator/release

      - name: Run skill-validator check
        run: |
          plugin_args=$(for d in plugins/*/; do echo "--plugin $d"; done)
          artifacts/publish/SkillValidator/release/skill-validator check \
            $plugin_args \
            --allowed-external-deps eng/allowed-external-deps.txt \
            --known-domains eng/known-domains.txt