Add seccomp codegen check to CI

Signed-off-by: Austin Vazquez <[email protected]>

Author: austinvazquez

.github/workflows/ci.yml

@@ -82,3 +82,19 @@ jobs:
       run: |
         echo "One or more lint checks failed"
         exit 1
+
+  check-codegen:
+    name: Check seccomp code generation
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: stable
+
+      - name: Validate seccomp code generation
+        run: bash script/validate/default-seccomp
+ 

script/validate/default-seccomp

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+# We run 'go generate' and see if we have a diff afterwards
+go generate ./seccomp/ > /dev/null
+# Let see if the working directory is clean
+diffs="$(git status --porcelain -- seccomp 2> /dev/null)"
+if [ "$diffs" ]; then
+	{
+		echo 'The result of go generate ./seccomp/ differs'
+		echo
+		echo "$diffs"
+		echo
+		echo 'Please re-run go generate ./seccomp/'
+		echo
+	} >&2
+	false
+else
+	echo 'Congratulations!  Seccomp profile generation is done correctly.'
+fi