Makefile

.PHONY: protogen
protogen:
	@echo "Generating protobuf files..."
	buf generate proto
	@echo "Protobuf generation complete."

.PHONY: protofmt
protofmt:
	buf format -w proto
	@echo "Protobuf formatting complete."

.PHONY: test
test: test-go test-scripts

.PHONY: test-go
test-go:
	# Every package EXCEPT ca-trust-guard, which the offline line below runs on
	# its own: an unrestricted run first would warm the module and toolchain
	# cache, and the hermetic assertion would stop asserting anything. Derived
	# from `go list` rather than hand-listed so a new package cannot be skipped.
	go test $$(go list ./... | grep -vE '/cmd/ca-trust-guard(/|$$)')
	GOTOOLCHAIN=local GOPROXY=off go test ./cmd/ca-trust-guard/...

.PHONY: test-scripts
test-scripts:
	bash scripts/test-derive-iam-role-name.sh
	bash scripts/test-normalize-release-options.sh
	python3 scripts/test-release-config-templates.py
	python3 scripts/test-check-image-locks.py
	python3 scripts/test-windows-pre-build-script.py
	python3 scripts/test-safe-relative-path.py
	bash scripts/test-release-workflow-tag-pin.sh
	python3 scripts/test-tool-integrity.py
	python3 scripts/test-ci-workflow.py
	python3 scripts/test-account-status-lifecycle.py
	bash scripts/test-s3-release-uploads.sh
	bash scripts/test-validate-release-artifacts.sh
	bash scripts/test-cosign-retry.sh
	bash scripts/test-publish-homebrew-formula.sh
	bash scripts/test-deny-os.sh
	bash scripts/test-ca-trust-guard.sh
	python3 -m unittest discover -b -s .github/actions/pr-review/scripts -p 'test_*.py'
	if command -v pwsh >/dev/null 2>&1; then pwsh -NoProfile -File scripts/test-s3-release-uploads.ps1; else echo "pwsh not found; skipping PowerShell S3 release upload tests"; fi

.PHONY: workflow-validate
workflow-validate:
	yq '.' .github/workflows/release.yaml >/dev/null

.PHONY: verify
verify: protogen test workflow-validate

.PHONY: docs
docs:
	@echo "Generating documentation diagrams..."
	dot -Tpng docs/diagrams/release-workflow.dot -o docs/diagrams/release-workflow.png
	@echo "Documentation generation complete."