From 4ed7d90e8aff9ef8f42e00d6c215819cf535abaf Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 29 Jan 2026 10:53:00 +0000
Subject: [PATCH 1/4] Initial plan


From 78ece172688b3ac1877f8aca93f9f755b6bff6a4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 29 Jan 2026 10:54:48 +0000
Subject: [PATCH 2/4] Add GitHub Action workflow for building ARMv7 binaries

Co-authored-by: fabaff <116184+fabaff@users.noreply.github.com>
---
 .github/workflows/build-armv7.yml | 54 +++++++++++++++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 .github/workflows/build-armv7.yml

diff --git a/.github/workflows/build-armv7.yml b/.github/workflows/build-armv7.yml
new file mode 100644
index 0000000..0ca4edd
--- /dev/null
+++ b/.github/workflows/build-armv7.yml
@@ -0,0 +1,54 @@
+name: Build ARMv7
+
+on:
+  push:
+    branches: [ master ]
+    tags: [ "v*" ]
+  pull_request:
+    branches: [ master ]
+  workflow_dispatch:
+
+jobs:
+  build-armv7:
+    name: Build for ARMv7
+    runs-on: ubuntu-latest
+    
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build ARMv7 binaries in Docker
+        run: |
+          docker run --rm --platform linux/arm/v7 \
+            -v "$(pwd)":/workspace \
+            -w /workspace \
+            golang:1.22-bookworm \
+            sh -c "
+              apt-get update && \
+              apt-get install -y libpam0g-dev && \
+              go mod tidy -compat=1.22 && \
+              mkdir -p bin && \
+              go build -trimpath -o bin/rdpgw-armv7 ./cmd/rdpgw && \
+              go build -trimpath -o bin/rdpgw-auth-armv7 ./cmd/auth
+            "
+
+      - name: Verify built binaries
+        run: |
+          ls -lh bin/
+          file bin/rdpgw-armv7
+          file bin/rdpgw-auth-armv7
+
+      - name: Upload ARMv7 artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: rdpgw-armv7-binaries
+          path: |
+            bin/rdpgw-armv7
+            bin/rdpgw-auth-armv7
+          retention-days: 30

From b6e92379373d898a2af227f4e80c4cf06324020d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 29 Jan 2026 10:57:16 +0000
Subject: [PATCH 3/4] Address code review feedback: remove go mod tidy and add
 apt cleanup

Co-authored-by: fabaff <116184+fabaff@users.noreply.github.com>
---
 .github/workflows/build-armv7.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-armv7.yml b/.github/workflows/build-armv7.yml
index 0ca4edd..752721d 100644
--- a/.github/workflows/build-armv7.yml
+++ b/.github/workflows/build-armv7.yml
@@ -32,7 +32,7 @@ jobs:
             sh -c "
               apt-get update && \
               apt-get install -y libpam0g-dev && \
-              go mod tidy -compat=1.22 && \
+              apt-get clean && rm -rf /var/lib/apt/lists/* && \
               mkdir -p bin && \
               go build -trimpath -o bin/rdpgw-armv7 ./cmd/rdpgw && \
               go build -trimpath -o bin/rdpgw-auth-armv7 ./cmd/auth

From 3c8bc1a81776b920ee7593bba57a0224fe592ae8 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 29 Jan 2026 10:59:03 +0000
Subject: [PATCH 4/4] Add explicit GITHUB_TOKEN permissions for security

Co-authored-by: fabaff <116184+fabaff@users.noreply.github.com>
---
 .github/workflows/build-armv7.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build-armv7.yml b/.github/workflows/build-armv7.yml
index 752721d..f9f0ca6 100644
--- a/.github/workflows/build-armv7.yml
+++ b/.github/workflows/build-armv7.yml
@@ -12,6 +12,8 @@ jobs:
   build-armv7:
     name: Build for ARMv7
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     
     steps:
       - name: Check out code