xenos/.github/workflows/rust.yml at main · scrayosnet/xenos · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
name: Rust

on:
  push:
  pull_request:
  schedule:
  - cron: '0 0 * * 0'

env:
  CARGO_TERM_COLOR: always

jobs:
  checks:
    name: Check
    runs-on: ubuntu-latest
    strategy:
      matrix:
        rust:
        - 'stable'
        - 'beta'
        - '1.88.0'
    steps:

    - name: Checkout repository
      uses: actions/checkout@v6

    - name: Install protoc
      uses: arduino/setup-protoc@v3
      with:
        repo-token: ${{ secrets.GITHUB_TOKEN }}

    - name: Install toolchain
      uses: dtolnay/rust-toolchain@master
      with:
        toolchain: ${{ matrix.rust }}

    - name: Check build
      run: cargo check --workspace

  lints:
    name: Lint
    runs-on: ubuntu-latest
    permissions:
      contents: read
      security-events: write
    steps:

    - name: Checkout repository
      uses: actions/checkout@v6

    - name: Install protoc
      uses: arduino/setup-protoc@v3
      with:
        repo-token: ${{ secrets.GITHUB_TOKEN }}

    - name: Install toolchain
      uses: dtolnay/rust-toolchain@master
      with:
        toolchain: stable
        components: clippy, rustfmt

    - name: Rust cache
      uses: Swatinem/rust-cache@v2
      with:
        shared-key: common
        cache-all-crates: 'true'

    - name: Install required cargo crates
      run: cargo install --locked clippy-sarif sarif-fmt cargo-machete cargo-deny cargo-audit

    - name: Check OpenSSL
      run: (! cargo tree -i openssl 2> /dev/null)

    - name: Check formatting
      run: cargo fmt --all -- --check

    - name: Check documentation
      run: cargo doc --workspace --no-deps

    - name: Check dependencies
      run: cargo machete --with-metadata

    - name: Check licenses and security
      run: cargo deny check

    - name: Perform linting
      run:
        cargo clippy
        --workspace
        --all-features
        --message-format=json | clippy-sarif | tee rust-clippy-results.sarif | sarif-fmt
      continue-on-error: true

    - name: Upload analysis results to GitHub
      uses: github/codeql-action/upload-sarif@v4
      with:
        sarif_file: rust-clippy-results.sarif
        wait-for-processing: true

    - name: Perform audit
      run: cargo audit

  tests:
    name: Test
    runs-on: ubuntu-latest
    needs: [checks, lints]
    strategy:
      matrix:
        rust:
        - 'stable'
        - 'beta'
        - '1.88.0'
    steps:

    - name: Checkout sources
      uses: actions/checkout@v6

    - name: Install protoc
      uses: arduino/setup-protoc@v3
      with:
        repo-token: ${{ secrets.GITHUB_TOKEN }}

    - name: Install toolchain
      uses: dtolnay/rust-toolchain@master
      with:
        toolchain: ${{ matrix.rust }}

    - name: Rust cache
      uses: Swatinem/rust-cache@v2
      with:
        shared-key: common
        cache-all-crates: 'true'

    - name: Run tests
      run: cargo test --workspace --verbose --all-features