e2e.installer-action.yml

on:
  schedule:
    - cron: "0 9 * * *"
  workflow_dispatch:

permissions: read-all

concurrency: "e2e.installer-action"

env:
  # UPDATE ON RELEASE: version.
  LATEST_VERSION: v2.6.0
  GH_TOKEN: ${{ secrets.E2E_GENERIC_TOKEN }}
  ISSUE_REPOSITORY: slsa-framework/slsa-verifier

jobs:
  installer:
    runs-on: ubuntu-latest
    steps:
      # Install at tag.
      # UPDATE ON RELEASE: tag.
      - uses: slsa-framework/slsa-verifier/actions/installer@v2.6.0
      - run: |
          version=$(slsa-verifier version 2>&1 | grep GitVersion | cut -d ':' -f2 | tr -d "[:space:]")
          [ "$version" == "${LATEST_VERSION:1}" ]

      - run: |
          binary_path=$(which slsa-verifier)
          rm -rf "$binary_path"

      # Install at commit.
      # UPDATE ON RELEASE: commit sha.
      - uses: slsa-framework/slsa-verifier/actions/installer@3714a2a4684014deb874a0e737dffa0ee02dd647 # v2.6.0
      - run: |
          version=$(slsa-verifier version 2>&1 | grep GitVersion | cut -d ':' -f2 | tr -d "[:space:]")
          [ "$version" == "${LATEST_VERSION:1}" ]

  if-succeeded:
    runs-on: ubuntu-latest
    needs: [installer]
    if: needs.installer.result == 'success'
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - run: ./.github/workflows/scripts/e2e-report-success.sh

  if-failed:
    runs-on: ubuntu-latest
    needs: [installer]
    if: always() && needs.installer.result == 'failure'
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
      - run: ./.github/workflows/scripts/e2e-report-failure.sh