#!/usr/bin/make -f

export DH_GOLANG_INSTALL_EXTRA := \
	$(wildcard attestation/sbom/boms/*/*.json) \
	$(wildcard attestation/sbom/boms/*/*.xml) \
	hack/test.token

export DH_GOLANG_EXCLUDES := signer/kms/azure archivista

%:
	dh $@ --builddirectory=_build --buildsystem=golang

execute_before_dh_auto_build:
	rm -fv $(CURDIR)/_build/src/github.com/in-toto/go-witness/imports_nonwindows.go
	rm -rfv $(CURDIR)/_build/src/github.com/in-toto/go-witness/attestation/omnitrail
	rm -fv $(CURDIR)/_build/src/github.com/in-toto/go-witness/source/archivista.go

# Tools 'schemagen' and 'check-certs' does not seem useful for users.
override_dh_auto_install:
	dh_auto_install -- --no-binaries

# Post "https://timestamp.sigstore.dev/api/v1/timestamp": dial tcp: lookup timestamp.sigstore.dev on [::1]:53: read udp [::1]:48233->[::1]:53: read: connection refused
XFAIL := TestTSP

# fails on amd64 but works on i386:
# === RUN   TestGetCertNonRetryableErrors/authentication_error_-_no_retry
# 2026/03/13 08:18:02 failed to serve: grpc: the server has been stopped
# === RUN   TestFetchToken
# 2026/03/13 09:02:11 failed to serve: grpc: the server has been stopped
# === RUN   TestGetCertRetryLogic/token_without_required_claims
# 2026/03/13 09:48:17 failed to serve: grpc: the server has been stopped
# FAIL	github.com/in-toto/go-witness/signer/fulcio	11.608s
XFLAKY := TestGetCertNonRetryableErrors|TestFetchToken|TestGetCertRetryLogic

override_dh_auto_test:
	dh_auto_test $(DH_BUILD_OPTS) -- -skip="$(XFAIL)|$(XFLAKY)"
	(! dh_auto_test $(DH_BUILD_OPTS) -- -run="$(XFAIL)")
	-dh_auto_test $(DH_BUILD_OPTS) -- -run="$(XFLAKY)"