mirror of
https://github.com/jmcorgan/fips.git
synced 2026-10-30 07:37:36 +00:00
Johnathan Corgan
ce7e164b25
build-aur.sh ran bare namcap on PKGBUILD-git and the built package. namcap exits 0 when it reports error-level findings, so make aur reported success on a package namcap had flagged. It now runs both through namcap-gate.sh, the gate the AUR workflows use, which fails on error-level findings and on a package that was not built. The README says so, and notes that packages left by earlier builds are linted too.
35 lines
913 B
Bash
Executable File
35 lines
913 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# Build the fips-git AUR package and validate it with the namcap gate,
|
|
# failing on namcap error-level findings.
|
|
#
|
|
# Usage: ./build-aur.sh
|
|
#
|
|
# Prerequisites: makepkg, namcap (pacman -S namcap)
|
|
# Output: fips-git-*.pkg.tar.zst in packaging/aur/
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
|
|
|
# Ensure we're on Arch Linux with makepkg available
|
|
if ! command -v makepkg &>/dev/null; then
|
|
echo "makepkg not found. This script requires Arch Linux." >&2
|
|
exit 1
|
|
fi
|
|
|
|
if ! command -v namcap &>/dev/null; then
|
|
echo "namcap not found. Install with: pacman -S namcap" >&2
|
|
exit 1
|
|
fi
|
|
|
|
cd "${SCRIPT_DIR}"
|
|
|
|
echo "Building fips-git AUR package..."
|
|
makepkg -sf -p PKGBUILD-git
|
|
|
|
# Through the gate, not bare namcap: namcap exits 0 on error-level findings.
|
|
echo "Running namcap validation..."
|
|
bash "${SCRIPT_DIR}/namcap-gate.sh" PKGBUILD-git fips-git-*.pkg.tar.zst
|
|
|
|
echo "Done."
|