From 933ef2918805d863504726143db5354f13a53455 Mon Sep 17 00:00:00 2001
From: Dmitry Ilyin <6576495+widgetii@users.noreply.github.com>
Date: Sat, 17 Oct 2026 11:32:30 +0300
Subject: [PATCH] ci: build and smoke-test pushes and pull requests

The build lives in build-xm.yml on the openipc branch, and GitHub takes a
pull request's workflows from the PR's own tree, so nothing ran on this
branch. This caller runs build-xm.yml@openipc on github.sha -- for a pull
request the merge of the PR into the current base, for a push the pushed
commit -- every SoC built and smoke-tested under qemu-hisilicon. It
cannot release: that workflow uploads only on workflow_dispatch.

Force-added, as on openipc-hisilicon: mainline's .gitignore `.*` rule
covers .github.
---
 .github/workflows/ci.yml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 .github/workflows/ci.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 000000000000..6f062c6f4f96
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,25 @@
+name: CI
+
+# The build lives in build-xm.yml on the openipc branch (the default
+# branch, so it can be dispatched).  GitHub runs a pull request's
+# workflows from the PR's own tree, so this branch needs this caller for
+# its pushes and pull requests to be built and smoke-tested at all.
+# It never releases: that workflow only uploads on workflow_dispatch.
+on:
+  push:
+    branches: [openipc-xm]
+  pull_request:
+    branches: [openipc-xm]
+
+jobs:
+  build:
+    uses: OpenIPC/u-boot/.github/workflows/build-xm.yml@openipc
+    # github.sha: on pull_request the merge of the PR into the current
+    # base, so the PR is built as it would land; on push, that commit.
+    with:
+      ref: ${{ github.sha }}
+    # A called workflow is validated against what its caller grants,
+    # skipped jobs included; release/publish ask for these.
+    permissions:
+      contents: write
+      id-token: write