driver-api-version.yml

# NOTE: it is UNSAFE to run ANY kind of script when using the pull_request_target trigger!
# DO NOT TOUCH THIS FILE UNLESS THE TRIGGER IS CHANGED.
# See warning in https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#pull_request_target.

name: Driver API_VERSION checks
on:
  pull_request_target:
    paths:
      - 'userspace/libscap/engine/bpf/**'
      - 'userspace/libscap/engine/modern_bpf/**'
      - 'userspace/libscap/engine/kmod/**'
      - 'driver/ppm_events_public.h'
      - 'driver/bpf/maps.h'
      - 'driver/modern_bpf/maps/maps.h'
      

jobs:
  paths-filter:
    runs-on: ubuntu-latest
    outputs:
      driver_api_changed: ${{ steps.filter.outputs.driver_api }}
    steps:
    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
    - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1
      id: filter
      with:
        filters: |
          driver_api:
            - 'driver/API_VERSION'

  driver-api:
    runs-on: ubuntu-22.04
    permissions:
      pull-requests: write
    needs: paths-filter
    if: needs.paths-filter.outputs.driver_api_changed == 'false'
    steps:
      - name: Check driver API_VERSION
        uses: mshick/add-pr-comment@7c0890544fb33b0bdd2e59467fbacb62e028a096 # v2.8.1
        with:
          message: |
            Please double check **driver/API_VERSION** file. See [versioning](https://github.com/falcosecurity/libs/blob/master/driver/README.VERSION.md#api-version-number).

            /hold