95 lines
2.9 KiB
YAML
95 lines
2.9 KiB
YAML
name: CI
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
pull_request:
|
|
branches: [master]
|
|
push:
|
|
branches: [master]
|
|
merge_group:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: ${{ github.event_name != 'push' }}
|
|
|
|
env:
|
|
CARGO_INCREMENTAL: 0
|
|
CARGO_TERM_COLOR: always
|
|
|
|
jobs:
|
|
fmt:
|
|
name: Format
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # v6.0.3
|
|
with:
|
|
persist-credentials: false
|
|
- uses: cachix/install-nix-action@b97f05dcb019ddea06450a50ef6203d2fdc19fee # v31
|
|
- name: Check Rust formatting
|
|
run: nix develop --command cargo fmt --all --check
|
|
|
|
clippy:
|
|
name: Clippy
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 40
|
|
steps:
|
|
- uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # v6.0.3
|
|
with:
|
|
persist-credentials: false
|
|
- uses: cachix/install-nix-action@b97f05dcb019ddea06450a50ef6203d2fdc19fee # v31
|
|
- name: Run Clippy
|
|
run: nix develop --command cargo clippy --all-targets --locked -- -D warnings
|
|
|
|
deny:
|
|
name: Dependency Audit
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 30
|
|
steps:
|
|
- uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # v6.0.3
|
|
with:
|
|
persist-credentials: false
|
|
- uses: cachix/install-nix-action@b97f05dcb019ddea06450a50ef6203d2fdc19fee # v31
|
|
- name: Check dependency policy
|
|
run: nix develop --command cargo deny check
|
|
|
|
test:
|
|
name: Test
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 40
|
|
steps:
|
|
- uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # v6.0.3
|
|
with:
|
|
persist-credentials: false
|
|
- uses: cachix/install-nix-action@b97f05dcb019ddea06450a50ef6203d2fdc19fee # v31
|
|
- name: Run test suite
|
|
run: nix develop --command cargo nextest run --all-targets --locked
|
|
|
|
nix:
|
|
name: Nix Package
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 50
|
|
steps:
|
|
- uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # v6.0.3
|
|
with:
|
|
persist-credentials: false
|
|
- uses: cachix/install-nix-action@b97f05dcb019ddea06450a50ef6203d2fdc19fee # v31
|
|
- name: Restore and save Nix store paths
|
|
uses: nix-community/cache-nix-action@7df957e333c1e5da7721f60227dbba6d06080569 # v7
|
|
with:
|
|
primary-key: nix-${{ runner.os }}-${{ hashFiles('flake.nix', '.tack/pins.lock.json', 'Cargo.lock', 'Cargo.toml', 'nix/**', 'src/**', 'public/**', 'config/**') }}
|
|
restore-prefixes-first-match: nix-${{ runner.os }}-
|
|
gc-max-store-size-linux: 5G
|
|
purge: true
|
|
purge-prefixes: nix-${{ runner.os }}-
|
|
purge-created: 0
|
|
purge-last-accessed: 0
|
|
purge-primary-key: never
|
|
- name: Check flake outputs
|
|
run: nix flake check --print-build-logs
|
|
- name: Build teapot
|
|
run: nix build .# --no-link -L
|