name: CI
on:
push:
branches:
pull_request:
branches:
permissions:
contents: read
jobs:
# fmt · clippy · test (3 OS) · MSRV · cargo-deny · cargo-vet · secret scan ·
# fuzz build-check · rustdoc · 100% per-line coverage · path-dep gate.
#
# No inputs: this repo already enforced a 100% per-line gate at
# `--workspace --all-features`, which is exactly the shared workflow's default,
# and MSRV is read from rust-version. Anything that needed configuring would be
# a behaviour change smuggled in by an adoption PR, so there is nothing here.
ci:
uses: SecurityRonin/fleet-ci/.github/workflows/rust-ci.yml@f9802dca64a95eb881fd05dd3f4f16e53b97f2b3
with:
# CARRIED ACROSS. The replaced workflow gated on --fail-under-functions
# 100 (functions, no line gate). The shared default is 100% per LINE — a
# gate this repo has never run under. Floor set just under the measured
# line coverage so it holds the line without granting slack.
coverage-gate: floor
coverage-floor: 95