Files
zeekayandHanzo Dev 63557328e6 ci: canonical pair — hanzo.yml + forge caller
github.com has no runner for hanzo-build-linux-amd64, so a caller under
.github/workflows is a gate that can never be scheduled. This is the ~7-line
caller on the plane that can (git.hanzo.ai git-runner fleet), pinned @v1.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-06 02:30:45 -07:00

18 lines
863 B
YAML

# The hanzoai Homebrew tap. Formulae are generated by GoReleaser, so there is no
# source here to compile — a formula breaks in exactly one way: it points at a
# release asset that is gone, or one whose bytes are not what it claims.
#
# So the gate installs what the tap promises, short of brew: fetch every url in
# every formula and check it against the sha256 declared next to it. A retagged
# release, a deleted asset or a stale checksum is red; `brew install` from this
# tap working is the same fact.
test:
- name: assets
run: |
awk '/^ *url "/{u=$2} /^ *sha256 "/{gsub(/"/,"",u);s=$2;gsub(/"/,"",s);print u,s}' *.rb \
| while read -r u s; do
echo "fetch $u"
curl -fsSL --max-time 180 "$u" -o /tmp/asset || { echo "MISSING ASSET: $u"; exit 1; }
echo "$s /tmp/asset" | sha256sum -c - || exit 1
done