name: Rust
on:
push:
pull_request:
env:
CARGO_TERM_COLOR: always
jobs:
setup:
name: Setup
runs-on: ubuntu-slim
outputs:
targets: ${{ steps.targets.outputs.targets }}
steps:
- uses: actions/checkout@v6
- id: targets
run: echo "targets=$(cat .github/targets.json | jq -c)" >> $GITHUB_OUTPUT
fmt:
name: Format
runs-on: ubuntu-slim
steps:
- uses: actions/checkout@v6
- uses: actions-rust-lang/setup-rust-toolchain@v1
with:
components: rustfmt
- run: cargo fmt --check
clippy:
name: Clippy
runs-on: ubuntu-slim
steps:
- uses: actions/checkout@v6
- uses: actions-rust-lang/setup-rust-toolchain@v1
with:
components: clippy
- run: cargo clippy -- -D warnings
test:
name: Test (${{ matrix.os }})
needs: [setup, fmt, clippy]
runs-on: ${{ matrix.os }}
strategy:
matrix:
include: ${{ fromJson(needs.setup.outputs.targets) }}
steps:
- uses: actions/checkout@v6
- uses: actions-rust-lang/setup-rust-toolchain@v1
- run: cargo test
build:
name: Build (${{ matrix.artifact }})
needs: [setup, test]
runs-on: ${{ matrix.os }}
permissions:
id-token: write
attestations: write
strategy:
matrix:
include: ${{ fromJson(needs.setup.outputs.targets) }}
steps:
- uses: actions/checkout@v6
- uses: actions-rust-lang/setup-rust-toolchain@v1
- name: Build release binary
run: cargo build --release
- name: Rename binary
shell: bash
run: mv "target/release/${{ matrix.bin }}" "${{ matrix.artifact }}"
- name: Attest provenance
uses: actions/attest-build-provenance@v2
with:
subject-path: ${{ matrix.artifact }}
- name: Upload artifact
uses: actions/upload-artifact@v4
with:
name: ${{ matrix.artifact }}
path: ${{ matrix.artifact }}
release:
name: Release
if: startsWith(github.ref, 'refs/tags/v')
needs: [build]
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Download all artifacts
uses: actions/download-artifact@v4
with:
path: artifacts
merge-multiple: true
- name: Create release
uses: softprops/action-gh-release@v2
with:
generate_release_notes: true
files: artifacts/*
publish:
name: Publish to crates.io
if: startsWith(github.ref, 'refs/tags/v')
needs: [build]
runs-on: ubuntu-latest
environment: crates-io
permissions:
id-token: write
steps:
- uses: actions/checkout@v6
- uses: actions-rust-lang/setup-rust-toolchain@v1
- name: Authenticate with crates.io
id: auth
uses: rust-lang/crates-io-auth-action@v1
- run: cargo publish
env:
CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
docker:
name: Docker
if: startsWith(github.ref, 'refs/tags/v')
needs: [build]
runs-on: ubuntu-latest
environment: docker
permissions:
packages: write
steps:
- uses: actions/checkout@v6
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Log in to GHCR
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Log in to Docker Hub
uses: docker/login-action@v3
with:
username: ${{ vars.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Extract metadata
id: meta
uses: docker/metadata-action@v5
with:
images: |
ghcr.io/twangodev/gemote
${{ vars.DOCKERHUB_USERNAME }}/gemote
tags: |
type=semver,pattern={{version}}
type=semver,pattern={{major}}.{{minor}}
type=raw,value=latest
- name: Build and push
uses: docker/build-push-action@v6
with:
context: .
push: true
platforms: linux/amd64,linux/arm64
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}