ripex 0.2.0

Multi-language structural parsing and fact extraction.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258

name: CI

on:
  push:
    branches: [main, master]
  pull_request:
    branches: [main, master]

permissions:
  contents: read

env:
  CARGO_TERM_COLOR: always

jobs:
  test:
    name: Build & Test
    runs-on: ${{ matrix.os }}
    timeout-minutes: 30
    permissions:
      contents: read
    strategy:
      fail-fast: false
      matrix:
        os: [ubuntu-latest, windows-latest, macos-latest]
        rust: [stable]

    steps:
      # actions/checkout v4 (reviewed immutable commit)
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262

      - name: Install Rust
        # dtolnay/rust-toolchain stable (reviewed immutable commit)
        uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
        with:
          toolchain: ${{ matrix.rust }}
          components: clippy, rustfmt

      - name: Cache cargo registry
        # actions/cache v4 (reviewed immutable commit)
        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
        with:
          path: ~/.cargo/registry
          key: ${{ runner.os }}-${{ matrix.rust }}-cargo-registry-${{ hashFiles('**/Cargo.lock', '**/Cargo.toml') }}
          restore-keys: |
            ${{ runner.os }}-${{ matrix.rust }}-cargo-registry-

      - name: Cache cargo build
        # actions/cache v4 (reviewed immutable commit)
        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
        with:
          path: target
          key: ${{ runner.os }}-${{ matrix.rust }}-cargo-build-${{ hashFiles('**/Cargo.lock', '**/Cargo.toml') }}
          restore-keys: |
            ${{ runner.os }}-${{ matrix.rust }}-cargo-build-

      - name: Check formatting
        run: cargo fmt --all -- --check

      - name: Build
        run: cargo build --locked --verbose

      - name: Test all targets and features
        run: cargo test --locked --all-targets --all-features --verbose

      - name: Clippy
        run: cargo clippy --locked --all-targets --all-features -- -D warnings

      - name: Build (no-default-features, library only)
        run: cargo build --locked --no-default-features --features "lang-all"

      - name: Documentation
        if: runner.os == 'Linux'
        env:
          RUSTDOCFLAGS: -D warnings
        run: cargo doc --locked --no-deps --all-features

  features:
    name: Feature ${{ matrix.feature }}
    runs-on: ubuntu-latest
    timeout-minutes: 20
    permissions:
      contents: read
    env:
      RUSTFLAGS: -D warnings
    strategy:
      fail-fast: false
      matrix:
        feature:
          - cli
          - lang-all
          - lang-c
          - lang-cpp
          - lang-csharp
          - lang-go
          - lang-js
          - lang-python
          - lang-rust
          - serde
    steps:
      # actions/checkout v4 (reviewed immutable commit)
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
      - name: Install Rust
        # dtolnay/rust-toolchain stable (reviewed immutable commit)
        uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
        with:
          toolchain: stable
      - name: Cache feature build
        # actions/cache v4 (reviewed immutable commit)
        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
        with:
          path: target
          key: ${{ runner.os }}-${{ matrix.feature }}-cargo-build-${{ hashFiles('**/Cargo.lock', '**/Cargo.toml') }}
          restore-keys: |
            ${{ runner.os }}-${{ matrix.feature }}-cargo-build-
      - name: Check isolated feature
        run: cargo check --locked --no-default-features --features "${{ matrix.feature }}"
      - name: Run isolated integration tests
        # --tests runs integration targets; feature-gated language tests skip unavailable modules.
        run: cargo test --locked --no-default-features --features "${{ matrix.feature }}" --tests

  minimal:
    name: Minimal library
    runs-on: ubuntu-latest
    timeout-minutes: 15
    permissions:
      contents: read
    env:
      RUSTFLAGS: -D warnings
    steps:
      # actions/checkout v4 (reviewed immutable commit)
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
      - name: Install Rust
        # dtolnay/rust-toolchain stable (reviewed immutable commit)
        uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
        with:
          toolchain: stable
      - run: cargo check --locked --no-default-features --lib

  compiler-conformance:
    name: Compiler conformance corpus
    runs-on: ubuntu-latest
    timeout-minutes: 30
    permissions:
      contents: read
    steps:
      # actions/checkout v4 (reviewed immutable commit)
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
      - name: Install Rust
        # dtolnay/rust-toolchain stable (reviewed immutable commit)
        uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
        with:
          toolchain: stable
      - name: Install Go
        # actions/setup-go v5 (reviewed immutable commit)
        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff
        with:
          go-version: stable
      - name: Install Node.js
        # actions/setup-node v4 (reviewed immutable commit)
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
        with:
          node-version: 24
      - name: Install Python
        # actions/setup-python v5 (reviewed immutable commit)
        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
        with:
          python-version: '3.12'
      - name: Install .NET
        # actions/setup-dotnet v4 (reviewed immutable commit)
        uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9
        with:
          dotnet-version: '8.0.x'

      - name: Install language analyzers
        run: |
          npm ci --prefix tests/lang-test/javascript
          python -m pip install mypy

      - name: Build ripex
        run: cargo build --locked --all-features

      - name: Check C17 corpus
        run: target/debug/ripex check tests/lang-test/c --lang c --trusted-project
      - name: Check C++20 corpus
        run: target/debug/ripex check tests/lang-test/cpp --lang cpp --trusted-project
      - name: Check C# project
        run: target/debug/ripex check tests/lang-test/csharp --trusted-project
      - name: Check Go project
        run: target/debug/ripex check tests/lang-test/go --trusted-project
      - name: Check JavaScript project
        run: target/debug/ripex check tests/lang-test/javascript/src --lang javascript --trusted-project
      - name: Check TypeScript project
        run: target/debug/ripex check tests/lang-test/javascript/tsconfig.json --trusted-project
      - name: Check strict Python project
        run: target/debug/ripex check tests/lang-test/python/src --lang python --trusted-project
      - name: Check Rust project
        run: target/debug/ripex check tests/lang-test/rust --trusted-project

  fuzz-replay:
    name: Fuzz corpus replay (deterministic)
    runs-on: ubuntu-latest
    timeout-minutes: 15
    permissions:
      contents: read
    steps:
      # actions/checkout v4 (reviewed immutable commit)
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
      - name: Install nightly Rust
        # dtolnay/rust-toolchain nightly (reviewed immutable commit)
        uses: dtolnay/rust-toolchain@4fd1da8b0805d2d2e936788875a7d65dbd677dc2
        with:
          toolchain: nightly
      - name: Install cargo-fuzz
        run: cargo install cargo-fuzz --version 0.12.0 --locked
      - name: Replay committed fuzz seeds
        working-directory: tests/fuzz
        shell: bash
        run: |
          set -euo pipefail
          if [[ ! -d corpus ]] || ! find corpus -type f -print -quit | grep -q .; then
            echo "::notice::No committed fuzz seeds found; deterministic replay skipped."
            exit 0
          fi
          for target in fuzz_all fuzz_js fuzz_python fuzz_go; do
            corpus_dir="corpus/$target"
            if [[ ! -d "$corpus_dir" ]]; then
              echo "::error::Missing committed corpus directory: $corpus_dir"
              exit 1
            fi
            echo "Replaying $target committed fuzz seeds"
            CARGOFLAGS=--locked cargo +nightly fuzz run --fuzz-dir . "$target" -- -runs=1
          done
  fuzz:
    name: Fuzz (advisory crash / hang hunting)
    needs: fuzz-replay
    runs-on: ubuntu-latest
    timeout-minutes: 15
    # Randomized fuzzing is advisory and must not block ordinary PR validation.
    continue-on-error: true
    permissions:
      contents: read
    steps:
      # actions/checkout v4 (reviewed immutable commit)
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
      - name: Install nightly Rust
        # dtolnay/rust-toolchain nightly (reviewed immutable commit)
        uses: dtolnay/rust-toolchain@4fd1da8b0805d2d2e936788875a7d65dbd677dc2
        with:
          toolchain: nightly
      - name: Install cargo-fuzz
        run: cargo install cargo-fuzz --version 0.12.0 --locked
      - name: Fuzz all parsers briefly
        working-directory: tests/fuzz
        shell: bash
        run: |
          # cargo-fuzz has no --locked flag; CARGOFLAGS locks its inner Cargo invocation.
          CARGOFLAGS=--locked cargo +nightly fuzz run --fuzz-dir . fuzz_all -- -max_total_time=60