Add CI

Author: kernc

.github/workflows/ci.yml

@@ -0,0 +1,26 @@
+name: CI
+on:
+  push:
+    branches: [master]
+    tags: ['v*']
+  pull_request: { branches: [master] }
+  schedule: [ cron: '7 4 12 * *' ]
+  workflow_dispatch:
+
+jobs:
+  test:
+    timeout-minutes: 5
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: shellcheck -S warning *.sh
+      - run: sudo apt-get install --no-install-recommends bubblewrap
+      - run: bash ./smoke-test.sh
+
+  workflow-keepalive:
+    if: github.event_name == 'schedule'
+    runs-on: ubuntu-latest
+    permissions:
+      actions: write
+    steps:
+      - uses: liskin/gh-workflow-keepalive@f72ff1a1336129f29bf0166c0fd0ca6cf1bcb38c  # v1.2.1

_wrapper_exe.sh

@@ -1,7 +1,7 @@
 #!/bin/sh
 # sandbox-venv: Secure container sandbox venv wrapper (GENERATED CODE)
 set -eu
-set -x
+
 alias realpath='realpath --no-symlinks'
 warn () { echo "sandbox-venv/wrapper: $*" >&2; }
 

smoke-test.sh

@@ -6,7 +6,6 @@ PS4="$(
     printf "\033[36;40;1m+%s${lineno:-}\033[0m " "$0"
 )"
 export PS4
-
 set -x
 
 "${0%/*}/build.sh"