feat: add CI check for executable permissions on shell scripts

rust/.github/workflows/continuous-integration.yml

@@ -36,6 +36,18 @@ jobs:
       - name: Check linting.
         run: nix develop -c make check-${{ matrix.language }}-linting
 
+  scripts-permissions:
+    name: Scripts Permissions
+    runs-on: ${{ matrix.architecture }}
+    strategy:
+      matrix:
+        architecture: [ubuntu-24.04, ubuntu-24.04-arm]
+    steps:
+      - name: Checkout code.
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - name: Check scripts permissions.
+        run: make check-scripts-permissions
+
   compile:
     name: Compile
     runs-on: ${{ matrix.architecture }}

rust/Makefile.jinja

@@ -50,6 +50,10 @@ check-rust-linting:
 check-github-actions-workflows-linting:
 	actionlint -verbose -color
 
+.PHONY: check-scripts-permissions
+check-scripts-permissions:
+	./ci/check-scripts-permissions.sh
+
 .PHONY: compile
 compile:
 	cargo build --verbose $(CARGO_LOCKED)

rust/ci/check-scripts-permissions.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env sh
+
+set -o errexit
+set -o xtrace
+
+exit_code=0
+for script in ci/*.sh; do
+	if [ -f "$script" ] && [ ! -x "$script" ]; then
+		exit_code=1
+	fi
+done
+
+exit $exit_code