lint.yml

# SPDX-FileCopyrightText: Yalan Zhang <yalzhang@redhat.com>
# SPDX-FileCopyrightText: Timothée Ravier <tim@siosm.fr>
# SPDX-FileCopyrightText: Jakob Naucke <jnaucke@redhat.com>
#
# SPDX-License-Identifier: CC0-1.0

# Inspired by https://github.com/coreos/repo-templates

name: "Lint"
on:
  pull_request:
    branches:
      - "main"
permissions:
  contents: "read"

# Don't waste job slots on superseded code
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always
  # Pinned toolchain for linting
  ACTIONS_LINTS_TOOLCHAIN: 1.88.0

jobs:
  linting:
    name: "Lints, pinned toolchain"
    runs-on: "ubuntu-24.04"
    container: "ghcr.io/trusted-execution-clusters/buildroot:fedora"
    steps:
      - name: "Check out repository"
        uses: actions/checkout@v7
      - name: "Install Rust toolchain"
        uses: dtolnay/rust-toolchain@v1
        with:
          toolchain: ${{ env.ACTIONS_LINTS_TOOLCHAIN }}
          components: rustfmt, clippy
      - name: "Install Go toolchain"
        uses: actions/setup-go@v6
        with:
          go-version-file: go.mod
      - name: "Cache build artifacts"
        uses: Swatinem/rust-cache@v2
      - name: "Build CRDs"
        run: make crds-rs
      - name: "cargo fmt (check)"
        run: cargo fmt -- --check -l
      - name: "cargo clippy (warnings)"
        run: cargo clippy --all-targets --all-features -- -D warnings
      - name: "gofmt (check)"
        run: if [ -n "$(gofmt -l .)" ]; then exit 1; fi
      - name: "go vet"
        run: go vet ./...
      - name: "Ensure Rust & Go conditions definitions use same strings"
        run: cargo test --test equal_conditions
      - name: "Ensure no disallowed crypto crates are shipped"
        run: cargo test --test no_disallowed_crypto