ci: Add github build

Signed-off-by: Ryan Northey <[email protected]>

.bazelrc

@@ -18,3 +18,6 @@ common:publish-ci --config=debs-ci
 common:publish-ci --//tools/tarball:target=//:html
 common:publish-ci --//tools/tarball:overwrite=//tools/tarball:true
 common:publish-ci --//debs:signing-token=//debs:signing-token.txt
+
+common:debug-bazel --announce_rc
+common:debug-bazel -s

.github/workflows/build.yml

@@ -0,0 +1,26 @@
+name: Build
+
+permissions:
+  contents: read
+
+on:
+  pull_request:
+  push:
+    branches:
+    - main
+
+concurrency:
+  group: >-
+    ${{ github.event.inputs.head_ref || github.run_id }}
+
+
+jobs:
+  build:
+    runs-on: ubuntu-latest-8-cores
+    if: github.repository_owner == 'envoyproxy'
+    steps:
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332  # v4.1.7
+    - run: |
+        ./build-repository.sh
+      env:
+        CONTEXT: deploy-preview

build-repository.sh

@@ -27,6 +27,8 @@ underline () {
 }
 
 import_public_key () {
+    mkdir -p ~/.gnupg
+    # chmod 700 ~/.gnupg
     touch ~/.gnupg/trustedkeys.gpg
     echo -e "$(underline $(bold "Import maintainers public key: checksum verification"))"
     gpg --import envoy-maintainers-public.key
@@ -102,6 +104,7 @@ main () {
     fi
     bazel run \
           "${bazel_args[@]}" \
+          --config=debug-bazel \
           //tools/tarball:unpack \
           /opt/build/repo/html
 }

netlify-should-run.sh

@@ -0,0 +1 @@
+exit 1

netlify.toml

@@ -1,6 +1,7 @@
 [build]
 publish = "html"
 command = "./build-repository.sh"
+ignore = "./netlify-should-run.sh"
 
 [build.environment]
   BAZELISK_HOME="/opt/build/cache/bazelisk"