name: Cloud Hypervisor Tests (SGX)
on: [merge_group, pull_request]
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    name: Tests (SGX)
    runs-on: ${{ github.event_name == 'pull_request' && 'ubuntu-latest' || 'jammy-sgx' }}
    env:
      AUTH_DOWNLOAD_TOKEN: ${{ secrets.AUTH_DOWNLOAD_TOKEN }}
    steps:
      - name: Fix workspace permissions
        if: ${{ github.event_name != 'pull_request' }}
        run: sudo chown -R github-runner:github-runner ${GITHUB_WORKSPACE}
      - name: Code checkout
        if: ${{ github.event_name != 'pull_request' }}
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Run SGX integration tests
        if: ${{ github.event_name != 'pull_request' }}
        timeout-minutes: 10
        run: scripts/dev_cli.sh tests --integration-sgx
      - name: Run SGX integration tests for musl
        if: ${{ github.event_name != 'pull_request' }}
        timeout-minutes: 10
        run: scripts/dev_cli.sh tests --integration-sgx --libc musl
      - name: Skipping build for PR
        if: ${{ github.event_name == 'pull_request' }}
        run: echo "Skipping build for PR"