Answer architecture round 4: 0 🔴, 1 🟡; run the repository checks on every file they read, and check each repository installs the release's own version

2026-10-13 20:39:06 +02:00
parent e6e06d007b
commit 895c0e977f
4 changed files with 23 additions and 13 deletions
@@ -120,11 +120,12 @@ jobs:
        env:
          PACKAGES_GPG_KEY: ${{ secrets.PACKAGES_GPG_KEY }}
          PACKAGES_RSA_KEY: ${{ secrets.PACKAGES_RSA_KEY }}
+          TAG: ${{ inputs.tag }}
        run: |
          build() {
            docker buildx build -f release-tooling/package-repos.Dockerfile \
              --secret id=gpg,env=PACKAGES_GPG_KEY --secret id=rsa,env=PACKAGES_RSA_KEY \
-              --build-context packages=packages "$@" .
+              --build-context packages=packages --build-arg "EXPECTED_VERSION=$TAG" "$@" .
          }
          build --target checks --output type=local,dest=checks
          build --target site --output type=local,dest=site