ci-code.yaml

name: Lint and Test Code

on:
  pull_request:
    branches:
      - main
    paths:
      - src/**
      - Cargo.*
      - .github/workflows/ci-code.yaml

jobs:
  rustfmt:
    name: rustfmt
    runs-on: ubuntu-latest
    steps:
    - name: harden runner
      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
      with:
        egress-policy: audit

    - name: checkout repository
      uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v4.2.0
      with:
        submodules: recursive
        persist-credentials: false

    - name: 'Install stable rust toolchain with rustfmt'
      run: |
        rustup update --no-self-update stable
        rustup default stable
        rustup component add rustfmt

    - name: 'cargo fmt'
      run: cargo fmt --all -- --check

  shfmt:
    name: shfmt
    runs-on: ubuntu-latest
    steps:
    - name: harden runner
      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
      with:
        egress-policy: audit

    - name: checkout repository
      uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v4.2.0
      with:
        submodules: recursive
        persist-credentials: false

    - name: shfmt
      run: |
        GOBIN=/usr/local/bin go install mvdan.cc/sh/v3/cmd/shfmt@latest
        if ! ./hack/code/shfmt.sh; then
          echo ""
          echo "Please run \`PROTECT_SHFMT_WRITE=true ./hack/code/shfmt.sh\`"
        fi

  shellcheck:
    name: shellcheck
    runs-on: ubuntu-latest
    steps:
    - name: harden runner
      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
      with:
        egress-policy: audit

    - name: checkout repository
      uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v4.2.0
      with:
        submodules: recursive
        persist-credentials: false

    - name: shellcheck
      run: ./hack/code/shellcheck.sh

  full-build:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        arch:
        - x86_64
    env:
      TARGET_ARCH: "${{ matrix.arch }}"
    name: 'Full build linux-${{ matrix.arch }}'
    steps:
    - name: harden runner
      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
      with:
        egress-policy: audit

    - name: checkout repository
      uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v4.2.0
      with:
        submodules: recursive
        persist-credentials: false

    - name: 'Install stable rust toolchain'
      run: |
        rustup update --no-self-update stable
        rustup default stable

    - name: cargo build
      run: cargo build

  full-test:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        arch:
        - x86_64
    env:
      TARGET_ARCH: "${{ matrix.arch }}"
    name: 'Full test linux-${{ matrix.arch }}'
    steps:
    - name: harden runner
      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
      with:
        egress-policy: audit

    - name: checkout repository
      uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v4.2.0
      with:
        submodules: recursive
        persist-credentials: false

    - name: 'Install stable rust toolchain'
      run: |
        rustup update --no-self-update stable
        rustup default stable

    - name: 'cargo test'
      run: cargo test

  full-clippy:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        arch:
        - x86_64
    env:
      TARGET_ARCH: "${{ matrix.arch }}"
    name: 'Full clippy linux-${{ matrix.arch }}'
    steps:
    - name: harden runner
      uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
      with:
        egress-policy: audit

    - name: checkout repository
      uses: actions/checkout@cbb722410c2e876e24abbe8de2cc27693e501dcb # v4.2.0
      with:
        submodules: recursive
        persist-credentials: false

    - name: 'Install stable rust toolchain with clippy'
      run: |
        rustup update --no-self-update stable
        rustup default stable
        rustup component add clippy

    - name: 'cargo clippy'
      run: cargo clippy