Skip to content

ci: add GitHub Actions workflows and pre-push gate #8

ci: add GitHub Actions workflows and pre-push gate

ci: add GitHub Actions workflows and pre-push gate #8

Workflow file for this run

name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
env:
CARGO_TERM_COLOR: always
RUSTFLAGS: -D warnings
jobs:
fmt:
name: Format
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
with:
toolchain: "1.95.0"
components: rustfmt
- run: cargo fmt --all -- --check
clippy:
name: Clippy (${{ matrix.os }})
runs-on: ${{ matrix.os }}
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
with:
toolchain: "1.95.0"
components: clippy
- uses: Swatinem/rust-cache@v2
- name: Rewrite SSH to HTTPS for public dependency
run: git config --global url."https://github.com/".insteadOf "ssh://git@github.com/"
- run: cargo clippy --workspace -- -D warnings
test:
name: Test (${{ matrix.os }})
runs-on: ${{ matrix.os }}
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
with:
toolchain: "1.95.0"
- uses: Swatinem/rust-cache@v2
- name: Rewrite SSH to HTTPS for public dependency
run: git config --global url."https://github.com/".insteadOf "ssh://git@github.com/"
- run: cargo test --workspace
changes:
name: Detect dependency changes
runs-on: ubuntu-latest
outputs:
deps: ${{ steps.filter.outputs.deps }}
steps:
- uses: actions/checkout@v4
- uses: dorny/paths-filter@v3
id: filter
with:
filters: |
deps:
- 'Cargo.toml'
- 'Cargo.lock'
- 'crates/*/Cargo.toml'
audit:
name: Security Audit
runs-on: ubuntu-latest
needs: changes
if: needs.changes.outputs.deps == 'true'
continue-on-error: true
steps:
- uses: actions/checkout@v4
- uses: rustsec/audit-check@v2
with:
token: ${{ secrets.GITHUB_TOKEN }}