From 0005acf62c52437c07a4ef878c2cd597dfc21291 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 21 Aug 2026 15:50:17 +0000
Subject: [PATCH 1/3] Add firmware-build GitHub Actions workflow using ARM
 toolchain

Co-authored-by: nikoscherer <135349093+nikoscherer@users.noreply.github.com>
---
 .github/workflows/build.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 .github/workflows/build.yml

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
new file mode 100644
index 0000000..5f4dbf4
--- /dev/null
+++ b/.github/workflows/build.yml
@@ -0,0 +1,23 @@
+name: firmware-build
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y cmake ninja-build gcc-arm-none-eabi
+
+      - name: Configure
+        run: cmake --preset Debug
+
+      - name: Build
+        run: cmake --build --preset Debug

From 6063724d2cbc1dd6486596b9d148c04b5bc2f196 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 21 Aug 2026 15:50:36 +0000
Subject: [PATCH 2/3] Fix firmware build by exporting flightTask with C linkage

Co-authored-by: nikoscherer <135349093+nikoscherer@users.noreply.github.com>
---
 components/main.cpp | 3 +--
 components/main.hpp | 5 ++---
 2 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/components/main.cpp b/components/main.cpp
index 931475f..cac3147 100644
--- a/components/main.cpp
+++ b/components/main.cpp
@@ -1,7 +1,6 @@
 #include "main.hpp"
 
-void flightTask(void *pvParameters) {
-  
+extern "C" void flightTask(void *pvParameters) {
 }
 
 int app_main() {
diff --git a/components/main.hpp b/components/main.hpp
index a731bf4..61fd4a6 100644
--- a/components/main.hpp
+++ b/components/main.hpp
@@ -10,9 +10,8 @@ extern I2C_HandleTypeDef hi2c1;
 extern SPI_HandleTypeDef hspi1;
 
 int app_main(void);
+void flightTask(void *pvParameters);
 
 #ifdef __cplusplus
 }
-#endif
-
-void flightTask(void *pvParameters);
\ No newline at end of file
+#endif
\ No newline at end of file

From 8464e87bd2f9135ae9471a8eea768412fcadaa1a Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 21 Aug 2026 15:53:02 +0000
Subject: [PATCH 3/3] Harden firmware workflow token permissions

Co-authored-by: nikoscherer <135349093+nikoscherer@users.noreply.github.com>
---
 .github/workflows/build.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5f4dbf4..2464bb7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -4,6 +4,9 @@ on:
   push:
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest