Merge pull request #17 from bordumb/dev-ambientAttestation #41

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	env:
	CARGO_TERM_COLOR: always

	jobs:
	check:
	name: Check
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@master
	with:
	toolchain: "1.94.0"
	components: clippy, rustfmt
	- run: cargo check --workspace

	test:
	name: Test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@master
	with:
	toolchain: "1.94.0"
	components: rust-src
	- run: cargo test --workspace

	clippy:
	name: Clippy
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@master
	with:
	toolchain: "1.94.0"
	components: clippy
	- run: cargo clippy --workspace -- -D warnings

	fmt:
	name: Format
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@master
	with:
	toolchain: "1.94.0"
	components: rustfmt
	- run: cargo fmt --check --all

	capsec-audit:
	name: Capability Audit
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- uses: actions/checkout@v4
	- uses: dtolnay/rust-toolchain@master
	with:
	toolchain: "1.94.0"
	- run: cargo build -p cargo-capsec
	- run: cargo run -p cargo-capsec -- capsec audit --fail-on high --quiet
	- name: Generate SARIF report
	if: always()
	run: cargo run -p cargo-capsec -- capsec audit --format sarif > capsec.sarif
	- name: Upload SARIF to GitHub Code Scanning
	if: always()
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: capsec.sarif

Navigation Menu