From f8e25c79bfe655be125e15fbef94c93a8f58f199 Mon Sep 17 00:00:00 2001
From: Alec Scott <hi@alecbcs.com>
Date: Thu, 3 Aug 2023 09:53:05 -0700
Subject: Add checksum CI test and verify with new versions for glab and gh
 (#39181)

---
 .github/workflows/audit.yaml | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

(limited to '.github/workflows')

diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
index 469867237b..55a1b8ff82 100644
--- a/.github/workflows/audit.yaml
+++ b/.github/workflows/audit.yaml
@@ -23,12 +23,29 @@ jobs:
         operating_system: ["ubuntu-latest", "macos-latest"]
     steps:
     - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # @v2
+      with:
+        fetch-depth: 2
     - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # @v2
       with:
-        python-version: ${{inputs.python_version}}
+        python-version: ${{ inputs.python_version }}
     - name: Install Python packages
       run: |
         pip install --upgrade pip setuptools pytest coverage[toml]
+    - name: Verify new package checksums
+      run: |
+        . share/spack/setup-env.sh
+        files=($(git diff --name-only -r HEAD^1 HEAD -- var/spack/repos/builtin/packages/*))
+        for file in ${files[@]}; do
+            package=$(basename $(dirname $file))
+            versions=($(git diff -r HEAD^1 HEAD -- $file | \
+            grep -E "^\+    version\(" | \
+            sed -E "s/^\+    version\(\"//g" | \
+            sed -E "s/\".*\)//g"))
+            if [ ${#versions[@]} -ne 0 ]; then
+                 printf "> spack checksum --verify $package ${versions[@]}"
+                 $(which spack) checksum --verify $package ${versions[@]}
+            fi
+        done
     - name: Package audits (with coverage)
       if: ${{ inputs.with_coverage == 'true' }}
       run: |
-- 
cgit v1.2.3-60-g2f50