name: CI
on:
push:
branches: [main]
pull_request:
branches: [main]
permissions:
contents: read
env:
CARGO_TERM_COLOR: always
RUST_BACKTRACE: 1
CARGO_NET_RETRY: 10
RUSTUP_MAX_RETRIES: 10
CARGO_INCREMENTAL: 0
jobs:
lint:
name: Lint
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 with:
persist-credentials: false
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 with:
components: rustfmt, clippy
- uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
- run: cargo fmt --check
- run: cargo check --all-targets
- run: cargo clippy --all-targets -- -W clippy::all -W clippy::pedantic -D warnings
- name: Check unused dependencies
uses: taiki-e/install-action@70e00552f3196d9a4c7dde7c57ef4c4830d422dd with:
tool: cargo-machete
- run: cargo machete
audit:
name: Security Audit
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 with:
persist-credentials: false
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
- name: Install cargo-audit
uses: taiki-e/install-action@70e00552f3196d9a4c7dde7c57ef4c4830d422dd with:
tool: cargo-audit
- run: cargo audit
zizmor:
name: Actions Security
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 with:
persist-credentials: false
- name: Install zizmor
run: pip install zizmor
- run: zizmor --no-online-audits .
test:
name: Test
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 with:
persist-credentials: false
- uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
- uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5
- name: Install nextest
uses: taiki-e/install-action@70e00552f3196d9a4c7dde7c57ef4c4830d422dd with:
tool: cargo-nextest
- run: cargo nextest run