From 75a6d4815d1b2e75045a7a973976f47d1c11f203 Mon Sep 17 00:00:00 2001
From: Arnav Wadhwa <40817363+ArnavVWadhwa@users.noreply.github.com>
Date: Fri, 28 Aug 2026 14:07:03 -0700
Subject: [PATCH] fix(ci): chown .build before writing os-list.json, build on
 PR to iterate

---
 .github/workflows/build-image.yml | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-image.yml b/.github/workflows/build-image.yml
index 1f60cc1..bb65386 100644
--- a/.github/workflows/build-image.yml
+++ b/.github/workflows/build-image.yml
@@ -35,11 +35,10 @@ jobs:
       - name: Build image
         run: sudo -E ./build-image.sh
 
-      - name: Publish image + Imager OS list
-        env:
-          GH_TOKEN: ${{ github.token }}
+      - name: Generate Imager OS list
         run: |
           set -euo pipefail
+          sudo chown -R "$(id -u):$(id -g)" .build   # build-image.sh ran as root
           . .build/image-meta.env
           TAG="dpea-pi-$(date +%Y%m%d-%H%M)"
           IMG_URL="/${GITHUB_REPOSITORY}/releases/download/${TAG}/${IMG_FILE}"
@@ -62,6 +61,16 @@ jobs:
                extract_sha256: $sha,
                image_download_size: $dsize
              } ] }' > .build/os-list.json
+          jq . .build/os-list.json > /dev/null && echo "os-list.json is valid JSON"
+          echo "TAG=$TAG"           >> "$GITHUB_ENV"
+          echo "IMG_FILE=$IMG_FILE" >> "$GITHUB_ENV"
+
+      - name: Publish latest Release
+        if: github.event_name != 'pull_request'   # publish on push + manual dispatch
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
           gh release create "$TAG" ".build/${IMG_FILE}" .build/os-list.json \
             --repo "$GITHUB_REPOSITORY" --title "$TAG" \
             --notes "Auto-built DPEA Pi image from ${GITHUB_SHA::7}" --latest