# Gitea Actions workflow (Gitea 1.21 or later with a registered act_runner).
name: nightly

on:
  schedule:
    - cron: "17 3 * * *"
  workflow_dispatch:

jobs:
  integration:
    name: live Quicknet
    runs-on: ubuntu-latest
    steps:
      - uses: https://gitea.com/actions/checkout@v4
      - uses: https://gitea.com/actions/setup-go@v5
        with:
          go-version: stable
      - run: go test -tags integration -count=1 -v -timeout 10m ./capsule ./provider/drand -run Live

  fuzz-long:
    runs-on: ubuntu-latest
    timeout-minutes: 120
    steps:
      - uses: https://gitea.com/actions/checkout@v4
      - uses: https://gitea.com/actions/setup-go@v5
        with:
          go-version: stable
      - name: every parser, 10 min each
        env:
          FUZZ_MINIMIZE: 10s
        run: ./scripts/fuzz.sh 10m
      - name: keep failing inputs
        if: failure()
        uses: https://gitea.com/actions/upload-artifact@v4
        with:
          name: fuzz-corpus
          path: "**/testdata/fuzz/**"

  vuln:
    runs-on: ubuntu-latest
    steps:
      - uses: https://gitea.com/actions/checkout@v4
      - uses: https://gitea.com/actions/setup-go@v5
        with:
          go-version: stable
      - run: go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...

  updates:
    name: dependency updates available
    runs-on: ubuntu-latest
    steps:
      - uses: https://gitea.com/actions/checkout@v4
      - uses: https://gitea.com/actions/setup-go@v5
        with:
          go-version: stable
      # Informational. Any change to age, tlock, drand or kyber is reviewed by
      # hand against SECURITY.md before it is applied.
      - run: go list -m -u all | grep '\[' || echo "no updates"