Repository navigation

Fix: Fenrir F-10621 #7125

	name: Check Headers

	# Verifies every public-facing wolfSSL header compiles standalone with
	# only wolfssl/options.h included first. Catches the common breakage
	# where a header silently relies on a transitive include from an
	# earlier .c file and stops compiling from a fresh consumer.
	#
	# Runs on drafts (fast static check).

	on:
	push:
	branches: [ master, main ]
	pull_request:
	types: [opened, synchronize, reopened, ready_for_review]
	branches: [ master, main ]

	concurrency:
	group: check-headers-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	check:
	# Only run from the wolfssl org to avoid burning forks' CI minutes.
	if: github.repository_owner == 'wolfssl'
	runs-on: ubuntu-24.04
	timeout-minutes: 25
	steps:
	- uses: actions/checkout@v5

	- name: Install dependencies
	uses: ./.github/actions/install-apt-deps
	with:
	packages: autoconf automake libtool build-essential
	ghcr-debs-tag: ubuntu-24.04-minimal

	- name: autogen
	run: ./autogen.sh

	- name: configure --enable-all
	run: ./configure --enable-all

	- name: Run check-headers
	run: ./.github/scripts/check-headers.sh

	# WOLFSSL_VERBOSE_LOGGING gates a branch of logging.h that no other
	# configuration compiles, so a typo there would reach users rather than
	# CI. Build only - enabling the tier while running tests would restore
	# the log volume it exists to avoid.
	- name: Compile the verbose logging tier
	run: \|
	./configure --enable-all CPPFLAGS=-DWOLFSSL_VERBOSE_LOGGING
	make -j$(nproc)