name: Container multi-architecture gate

on:
  pull_request:
    paths:
      - "backend/**"
      - "frontend/**"
      - "harness/**"
      - "docker/**"
      - "scripts/verify-container-images.sh"
      - ".github/workflows/container-multiarch.yml"
  workflow_dispatch:

jobs:
  verify:
    runs-on: ubuntu-24.04
    strategy:
      fail-fast: false
      matrix:
        platform: [linux/amd64, linux/arm64]
    steps:
      - uses: actions/checkout@v4
      - uses: docker/setup-qemu-action@v3
      - uses: docker/setup-buildx-action@v3
        with:
          driver: docker
      - name: Build, smoke, security-check, and inventory
        env:
          PLATFORM: ${{ matrix.platform }}
        run: ./scripts/verify-container-images.sh
      - uses: actions/upload-artifact@v4
        with:
          name: container-inventory-${{ strategy.job-index }}
          path: .artifacts/container-images/