name: CI
on:
push:
pull_request:
permissions:
contents: read
jobs:
check:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install pinned toolchain
run: rustup show active-toolchain
- run: cargo fmt --all -- --check
- run: cargo clippy --all-targets --all-features --locked -- -D warnings
- run: cargo test --all-targets --all-features --locked
- run: cargo build --release --locked
- name: Verify container build
run: docker build --tag app:ci .
dependencies:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- run: rustup show active-toolchain
- run: cargo install cargo-deny --version 0.20.2 --locked
- run: cargo deny --locked check