rust-tests.yml

name: Rust Tests & Linting

on:
  push:

jobs:
  build_and_test:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
    - name: Checkout code
      uses: actions/checkout@v4  

    - name: Install Rust
      uses: actions-rs/toolchain@v1
      with:
        profile: minimal
        toolchain: stable
        components: clippy
        override: true

    - name: Cache cargo registry
      uses: actions/cache@v4  
      with:
        path: ~/.cargo/registry
        key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
        restore-keys: |
          ${{ runner.os }}-cargo-registry-

    - name: Cache cargo index
      uses: actions/cache@v4  
      with:
        path: ~/.cargo/index
        key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
        restore-keys: |
          ${{ runner.os }}-cargo-index-

    - name: Cache cargo build
      uses: actions/cache@v4
      with:
        path: target
        key: ${{ runner.os }}-cargo-build-${{ hashFiles('**/Cargo.lock') }}
        restore-keys: |
          ${{ runner.os }}-cargo-build-

    - name: Build
      run: cargo test --no-run --workspace --all-features

    - name: Default features
      run: cargo test --workspace

    - name: All features
      run: cargo test --workspace --all-features

    - name: No-default features
      run: cargo test --workspace --no-default-features

  security_audit:
    runs-on: ubuntu-latest
    permissions:
      security-events: write
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Security audit
      uses: actions-rs/audit-check@v1.2.0
      with:
        sarif-report: results_audit.sarif
        token: ${{ secrets.GITHUB_TOKEN }}
      continue-on-error: true

    - name: Upload audit results to GitHub
      uses: github/codeql-action/upload-sarif@v3
      with:
        sarif_file: results_audit.sarif
        wait-for-processing: true

    - name: Run rust-clippy
      run: |
        cargo clippy --all-features --message-format=json | clippy-sarif | tee results_clippy.sarif | sarif-fmt
      continue-on-error: true   

    - name: Upload clippy results to GitHub
      uses: github/codeql-action/upload-sarif@v3
      with:
        sarif_file: results_clippy.sarif
        wait-for-processing: true