From 769f032a7c72a7d30afd5f428525c32e01ed4ef2 Mon Sep 17 00:00:00 2001
From: Venca Krecl <venca.email@gmail.com>
Date: Sun, 19 Jul 2026 17:37:31 +0200
Subject: [PATCH] Add CI job that installs the extension with PIE

Prove the composer.json works end to end: a `pie-install` job downloads a
pinned pie.phar, runs `pie install` from the checkout, and verifies the
gnupg extension is loaded.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4cafb1e..b7a2779 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -36,3 +36,32 @@ jobs:
       - name: Run tests
         run: |
           make test
+
+  pie-install:
+    runs-on: ubuntu-24.04
+    env:
+      PIE_VERSION: "1.4.8"
+
+    steps:
+      - name: Install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y gpg gpgsm libgpgme-dev php-cli php-dev autoconf libtool make gcc
+
+      - name: Checkout php-gnupg
+        uses: actions/checkout@v4
+        with:
+          submodules: true
+
+      - name: Download pie.phar
+        run: |
+          curl -fsSL -o pie.phar \
+            "https://github.com/php/pie/releases/download/${PIE_VERSION}/pie.phar"
+
+      - name: Install php-gnupg with PIE
+        # PIE builds as the current user and auto-elevates with sudo (passwordless
+        # in GitHub Actions) only for the final install step.
+        run: php pie.phar install
+
+      - name: Verify the extension is loaded
+        run: php -m | grep -qx gnupg