name: Live TLS

# Manual and weekly. This workflow reaches public DoT resolvers, so it is
# non-blocking by construction and never runs on push or pull_request.
on:
  workflow_dispatch:
  schedule:
    - cron: "0 5 * * 1"

env:
  ZIG_VERSION: "0.16.0"

jobs:
  live-tls:
    runs-on: ubuntu-24.04
    timeout-minutes: 15

    steps:
      - uses: actions/checkout@v4

      - name: Set up Zig
        uses: mlugg/setup-zig@v2
        with:
          version: ${{ env.ZIG_VERSION }}

      - name: Run full test suite including live-network tests
        run: zig build test -Dintegration -Dlive