name: Check header guards

on:
  push:
    branches: [devel]
  pull_request:

permissions:
  contents: read

jobs:
  build:
    # Set the type of machine to run on
    runs-on: ubuntu-26.04
    steps:

      - name: Checkout source code
        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
        with:
          persist-credentials: false

      - uses: bazel-contrib/setup-bazel@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86 # 0.19.0
        with:
          bazelisk-cache: true
          repository-cache: true

      - name: Test the tools
        run: bazel test //tools:tools_tests
        env:
          CC: clang

      - name: Check licenses, headers, file names, versions and the amalgamation
        run: bazel run //tools:check
        env:
          CC: clang

      # third_party/ must be the pinned release archives, byte for byte.
      - name: Check that third_party matches its pinned archives
        run: bazel run //tools:third_party -- --check
        env:
          CC: clang