~ refactor ci

.github/workflows/statix.yaml → .github/workflows/lint.yaml

@@ -1,3 +1,4 @@
+name: Lint
 on:
   pull_request:
     branches: ["*"]
@@ -10,11 +11,23 @@ on:
       - 'docs/**'
       - '**/*.md'
 
-name: Nix code
+# Make sure CI fails on all warnings, including Clippy lints
+env:
+  RUSTFLAGS: "-Dwarnings"
 
 jobs:
+  clippy:
+    name: Clippy Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check
+        run: |
+          rustup default nightly
+          rustup component add clippy
+          cargo clippy --all-targets --all-features
   statix:
-    name: lint
+    name: Statix Check
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.github/workflows/test.yaml

@@ -0,0 +1,49 @@
+name: Test
+on:
+  pull_request:
+    branches: ["*"]
+    paths-ignore:
+      - 'docs/**'
+      - '**/*.md'
+  push:
+    branches: ["main", "dev"]
+    paths-ignore:
+      - 'docs/**'
+      - '**/*.md'
+
+jobs:
+  miri:
+    name: UB detection
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install Miri
+        run: |
+          rustup toolchain install nightly --component miri
+          rustup override set nightly
+          cargo miri setup
+      - name: Test with Miri
+        run: cargo miri test
+  fuzzy:
+    name: Fuzzy
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Test
+        run: |
+          rustup default nightly
+          cargo install cargo-fuzz
+          cargo fuzz run --all-features fuzz_parser_1 -- -max_len=256 -runs=16777216
+  vm:
+    name: VM Deploy
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: "write"
+      contents: "read"
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+      - name: Run os for test
+        run: nix run github:nix-community/nixos-anywhere -- --flake .#tester --vm-test
+

README.md

@@ -4,7 +4,7 @@
 [![nixos infra](https://img.shields.io/badge/NixOS%20infra-3A8FB7?style=for-the-badge&logo=nixos&logoColor=BBDDE5)](https://nixos.wiki/wiki/Comparison_of_secret_managing_schemes)
 [![doc](https://img.shields.io/badge/document-B4A582?style=for-the-badge&logo=gitbook&logoColor=white)](https://oluceps.github.io/vaultix/)
 [![eval status](https://img.shields.io/github/actions/workflow/status/oluceps/vaultix/eval.yaml?branch=main&style=for-the-badge&label=eval&color=00AA90)](https://github.com/oluceps/vaultix/actions?query=branch%3Amain)
-[![test status](https://img.shields.io/github/actions/workflow/status/oluceps/vaultix/vm-test.yaml?branch=main&style=for-the-badge&label=test&color=00AA90)](https://github.com/oluceps/vaultix/actions?query=branch%3Amain)
+[![test status](https://img.shields.io/github/actions/workflow/status/oluceps/vaultix/test.yaml?branch=main&style=for-the-badge&label=test&color=00AA90)](https://github.com/oluceps/vaultix/actions?query=branch%3Amain)
 
 Secret managing scheme for NixOS