Use "v2.0.0" branch for security check #798
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| permissions: | |
| contents: read | |
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - master | |
| schedule: | |
| - cron: '0 2 * * 0' | |
| env: | |
| CARGO_INCREMENTAL: 0 | |
| CARGO_NET_GIT_FETCH_WITH_CLI: true | |
| CARGO_NET_RETRY: 10 | |
| CARGO_TERM_COLOR: always | |
| RUST_BACKTRACE: 1 | |
| RUSTFLAGS: -D warnings | |
| RUSTDOCFLAGS: -D warnings | |
| RUSTUP_MAX_RETRIES: 10 | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| test: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, windows-latest, macos-latest] | |
| rust: [nightly, beta, stable] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| # --no-self-update is necessary because the windows environment cannot self-update rustup.exe. | |
| run: rustup update ${{ matrix.rust }} --no-self-update && rustup default ${{ matrix.rust }} | |
| - run: cargo build --all --all-features --all-targets | |
| - name: Run cargo check (without dev-dependencies to catch missing feature flags) | |
| if: startsWith(matrix.rust, 'nightly') | |
| run: cargo check -Z features=dev_dep | |
| - name: Add rust-src | |
| if: startsWith(matrix.rust, 'nightly') | |
| run: rustup component add rust-src | |
| # https://github.com/smol-rs/async-io/pull/144#issuecomment-1666927490 | |
| # - name: Check selected Tier 3 targets | |
| # if: startsWith(matrix.rust, 'nightly') && matrix.os == 'ubuntu-latest' | |
| # run: cargo check -Z build-std --target=riscv32imc-esp-espidf | |
| - run: cargo test | |
| # Copied from: https://github.com/rust-lang/stacker/pull/19/files | |
| windows_gnu: | |
| runs-on: windows-latest | |
| strategy: | |
| matrix: | |
| rust: [nightly] | |
| target: | |
| - x86_64-pc-windows-gnu | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| # --no-self-update is necessary because the windows environment cannot self-update rustup.exe. | |
| run: rustup update ${{ matrix.rust }} --no-self-update && rustup default ${{ matrix.rust }} | |
| - run: rustup target add ${{ matrix.target }} | |
| - run: cargo build --target ${{ matrix.target }} --all --all-features --all-targets | |
| - run: cargo test --target ${{ matrix.target }} | |
| cross: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, macos-latest] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| run: rustup update stable | |
| - name: Install cross | |
| uses: taiki-e/install-action@cross | |
| # We don't test BSDs, since we already test them in Cirrus. | |
| - name: Android | |
| if: startsWith(matrix.os, 'ubuntu') | |
| run: cross test --target arm-linux-androideabi | |
| - name: iOS | |
| if: startsWith(matrix.os, 'macos') | |
| run: | | |
| rustup target add aarch64-apple-ios | |
| cross build --target aarch64-apple-ios | |
| - name: Linux x32 | |
| if: startsWith(matrix.os, 'ubuntu') | |
| run: | | |
| rustup target add x86_64-unknown-linux-gnux32 | |
| cross check --target x86_64-unknown-linux-gnux32 | |
| - name: Fuchsia | |
| if: startsWith(matrix.os, 'ubuntu') | |
| run: | | |
| rustup target add x86_64-unknown-fuchsia | |
| cargo build --target x86_64-unknown-fuchsia | |
| - name: illumos | |
| if: startsWith(matrix.os, 'ubuntu') | |
| run: | | |
| rustup target add x86_64-unknown-illumos | |
| cargo build --target x86_64-unknown-illumos | |
| msrv: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, windows-latest] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install cargo-hack | |
| uses: taiki-e/install-action@cargo-hack | |
| - run: cargo hack build --no-dev-deps --rust-version | |
| clippy: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| run: rustup update stable | |
| - run: cargo clippy --all-features --all-targets | |
| fmt: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install Rust | |
| run: rustup update stable | |
| - run: cargo fmt --all --check | |
| security_audit: | |
| permissions: | |
| checks: write | |
| contents: read | |
| issues: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # rustsec/audit-check used to do this automatically | |
| - name: Generate Cargo.lock | |
| run: cargo generate-lockfile | |
| # https://github.com/rustsec/audit-check/issues/2 | |
| - uses: rustsec/[email protected] | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} |