cirrus: add step to validate integrity of vendor

Signed-off-by: Aditya Rajan <[email protected]>

Author: flouthoc

.cirrus.yml

@@ -86,6 +86,16 @@ build_task:
 
 validate_task:
   alias: "validate"
+  depends_on:
+    - "build"
+  cargo_cache: *ro_cargo_cache
+  targets_cache: *ro_targets_cache
+  bin_cache: *ro_bin_cache
+  setup_script: *setup
+  main_script: *main
+
+verify_vendor_task:
+  alias: "verify_vendor"
   depends_on:
     - "build"
   # From this point forward, all cache's become read-only - meaning
@@ -106,7 +116,6 @@ validate_task:
   setup_script: *setup
   main_script: *main
 
-
 unit_task:
   alias: "unit"
   depends_on:
@@ -159,6 +168,7 @@ success_task:
   depends_on:
     - "build"
     - "validate"
+    - "verify_vendor"
     - "unit"
     - "integration"
     - "meta"

contrib/cirrus/runner.sh

@@ -28,6 +28,15 @@ _run_validate() {
     make validate
 }
 
+_run_verify_vendor() {
+   if git diff --no-ext-diff --quiet --exit-code;
+   then
+     echo No tampering with vendor...;
+   else
+     return 1;
+   fi;
+}
+
 _run_unit() {
     make unit
 }