ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
  schedule:
    # New RustSec advisories are published independently of our pushes:
    # re-audit the pinned Cargo.lock daily so a fresh advisory against an
    # unchanged dependency tree is still caught.
    - cron: '17 6 * * *'

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
      - name: Run tests
        run: cargo test -- --test-threads=1
        env:
          DATABASE_URL: test_db.sqlite3
          TEST_DATABASE_URL: test_db.sqlite3
          SERVER_ADDRESS: 127.0.0.1:3000
          SECRET_MAX_LENGTH: 128
          CANARY: 🐦
          RATE_LIMIT_COOLDOWN: 1
          RATE_LIMIT_MAX_FAILED_ATTEMPTS: 3
          STORE_RATE_LIMIT_BURST: 10000
          STORE_RATE_LIMIT_REFILL_PER_SECOND: 10000
          LOOKUP_RATE_LIMIT_BURST: 10000
          LOOKUP_RATE_LIMIT_REFILL_PER_SECOND: 10000
          RATE_LIMIT_MAX_IDENTIFIERS: 100000
          DATABASE_MAX_CONCURRENCY: 16

  audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: rustsec/audit-check@v2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}