rustferry_github/lib.rs
1//! Secure GitHub Actions workflow generation for remote physical-iPhone builds.
2//!
3//! The generated workflow keeps source compilation and Apple signing in
4//! separate jobs. Only the protected signing job receives secret references.
5
6#![forbid(unsafe_code)]
7
8/// Safe client-side ingestion and independent verification of Actions artifacts.
9pub mod artifact;
10/// Secret-free, offline inspection and verification of downloaded artifact files.
11pub mod artifact_offline;
12/// Verified run-attempt artifact download, cache, and client publication.
13pub mod artifact_store;
14/// Canonical GitHub Git endpoints and one-shot local remote discovery.
15pub mod git_endpoint;
16/// Fixed-tool, environment-cleared Git process policy.
17pub mod git_process;
18/// Private bare Git repository layout for isolated temporary-ref publication.
19pub mod git_repository;
20/// Bounded, attempt-scoped GitHub Actions job-log ingestion and redaction.
21pub mod job_logs;
22/// GitHub Actions build-provider orchestration and temporary-ref lifecycle.
23pub mod provider;
24/// Operation-scoped Git snapshot identity and canonical object graph.
25pub mod snapshot;
26/// Bounded GitHub REST transport and fixed `gh` process adapter.
27pub mod transport;
28/// Validated configuration and deterministic workflow rendering.
29pub mod workflow;
30
31mod strict_json;
32
33pub use artifact_store::{GithubArtifactStoreError, GithubVerifiedArtifactStore};
34
35pub use workflow::{
36 DeveloperDirectory, GeneratedWorkflow, MAX_SIGNING_PROFILES, ProtectedEnvironment,
37 PublicSourceRepository, SecretName, SigningSecretNames, TemporaryBranchNamespace,
38 TrustedSourceRef, WorkerDistribution, WorkflowConfig, WorkflowConfigError, WorkflowFileName,
39 WorkflowLimits, generate_workflow,
40};