name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
env:
CARGO_TERM_COLOR: always
jobs:
check:
name: Check & Test
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
with:
submodules: recursive
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable
with:
components: clippy, rustfmt
- name: Generate Cargo.lock for deterministic cache key
run: cargo generate-lockfile
- name: Rust Cache
uses: Swatinem/rust-cache@v2
with:
key: forge-guard-${{ hashFiles('Cargo.lock') }}
cache-on-failure: true
- name: Check formatting
run: cargo fmt --check
- name: Clippy
run: cargo clippy -- -D warnings
- name: Run tests
run: cargo test --workspace
audit:
name: Security Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
with:
submodules: recursive
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable
- name: Generate Cargo.lock for deterministic cache key
run: cargo generate-lockfile
- name: Rust Cache
uses: Swatinem/rust-cache@v2
with:
key: forge-guard-audit-${{ hashFiles('Cargo.lock') }}
cache-on-failure: true
- name: Install cargo-audit
run: cargo install cargo-audit --locked
- name: Audit Rust dependencies
run: cargo audit
- name: Install forge-audit
run: cargo build --release && cp target/release/forge-guard /usr/local/bin/
- name: Scan Solidity dependencies
run: forge-guard scan --depth 1 || echo "⚠️ forge-guard scan completed with warnings"