cupcake/.github/workflows/ci.yml at main · eqtylab/cupcake · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
# Lightweight CI for Pull Requests
# Runs fast checks only - full test suite runs on merge to main (ci-full.yml)
name: CI

on:
  pull_request:
    branches: [main]
    paths:
      # Rust code changes
      - "**.rs"
      - "**/Cargo.toml"
      - "Cargo.lock"
      # CI workflow changes
      - ".github/workflows/ci.yml"
      # Policy/fixture changes that affect tests
      - "fixtures/**"
      - "**.rego"
      # Python binding changes
      - "cupcake-py/**"
  workflow_dispatch:

env:
  CARGO_TERM_COLOR: always

jobs:
  fmt:
    name: Format
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt
      - run: cargo fmt --all -- --check

  clippy:
    name: Clippy
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
      - uses: Swatinem/rust-cache@v2
      - run: cargo clippy --all-targets --all-features -- -D warnings

  test:
    name: Unit Tests (Linux)
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Setup Rust cache
        uses: Swatinem/rust-cache@v2
        with:
          cache-targets: false

      - name: Install OPA
        run: |
          curl -L -o opa https://github.com/open-policy-agent/opa/releases/download/v1.7.1/opa_linux_amd64_static
          chmod +x opa
          sudo mv opa /usr/local/bin/
          opa version

      - name: Clean up any existing global config (test isolation)
        run: |
          # Remove any pre-existing global cupcake config to ensure test isolation
          CONFIG_DIR="$HOME/.config/cupcake"
          if [ -d "$CONFIG_DIR" ]; then
            echo "Found existing global config at: $CONFIG_DIR"
            echo "Removing for test isolation..."
            rm -rf "$CONFIG_DIR"
            echo "Cleaned up global config directory"
          else
            echo "No existing global config found at: $CONFIG_DIR"
          fi

      - name: Run unit tests
        run: |
          cargo test --lib --bins
        env:
          CI: true

      - name: Run doc-tests
        run: |
          cargo test --doc -j 1 -- --test-threads=1
        env:
          CI: true

  test-python:
    name: Python Bindings (Linux)
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Setup Rust cache
        uses: Swatinem/rust-cache@v2
        with:
          cache-targets: false

      - name: Setup Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install OPA
        run: |
          curl -L -o opa https://github.com/open-policy-agent/opa/releases/download/v1.7.1/opa_linux_amd64_static
          chmod +x opa
          sudo mv opa /usr/local/bin/
          opa version

      - name: Create virtualenv and install dependencies
        run: |
          python -m venv .venv
          source .venv/bin/activate
          pip install maturin pytest pytest-asyncio

      - name: Build Python bindings
        run: |
          source .venv/bin/activate
          cd cupcake-py
          maturin develop --release

      - name: Run Python tests
        run: |
          source .venv/bin/activate
          cd cupcake-py
          pytest tests/ -v
        env:
          CI: true