dvault/.github/workflows/rust.yml at master · onepub-dev/dvault · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
name: Rust

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
  LOCKBOX_COMPRESSION_CORPUS_VERSION: v1

on:
  push:
    paths:
      - "rust/**"
      - ".github/workflows/rust.yml"
  pull_request:
    paths:
      - "rust/**"
      - ".github/workflows/rust.yml"

jobs:
  test:
    name: ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        os:
          - ubuntu-latest
          - macos-latest
          - windows-latest

    defaults:
      run:
        working-directory: rust

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          components: rustfmt, clippy

      - name: Cache Cargo
        uses: Swatinem/rust-cache@v2
        with:
          workspaces: rust

      - name: Required checks
        run: bash tools/check_required.sh

      - name: Agent IPC smoke test
        run: cargo test -p lockbox_cli --test agent_flow -- --ignored

      - name: Check fuzz targets
        run: cargo check --manifest-path fuzz/Cargo.toml

  portable-core:
    name: core ${{ matrix.target }}
    runs-on: ${{ matrix.os }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - os: ubuntu-latest
            target: aarch64-linux-android
          - os: ubuntu-latest
            target: wasm32-unknown-unknown
          - os: ubuntu-latest
            target: wasm32-wasip2
          - os: macos-latest
            target: aarch64-apple-ios

    defaults:
      run:
        working-directory: rust

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: ${{ matrix.target }}

      - name: Cache Cargo
        uses: Swatinem/rust-cache@v2
        with:
          workspaces: rust
          key: portable-core-${{ matrix.target }}

      - name: Check core
        run: cargo check -p lockbox_core --target ${{ matrix.target }}

      - name: Check secure tests
        if: matrix.target != 'wasm32-unknown-unknown'
        run: cargo check -p lockbox_secure --target ${{ matrix.target }} --tests

      - name: Check secure web library
        if: matrix.target == 'wasm32-unknown-unknown'
        run: cargo check -p lockbox_secure --target ${{ matrix.target }} --lib

  compression-regression:
    name: compression regression corpus
    runs-on: ubuntu-latest
    timeout-minutes: 20

    defaults:
      run:
        working-directory: rust

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Restore compression corpus
        id: compression-corpus-cache
        uses: actions/cache@v4
        with:
          path: rust/.ci-compression-corpus
          key: lockbox-compression-corpus-${{ env.LOCKBOX_COMPRESSION_CORPUS_VERSION }}

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Cache Cargo
        uses: Swatinem/rust-cache@v2
        with:
          workspaces: rust
          key: compression-regression

      - name: Generate compression corpus
        if: steps.compression-corpus-cache.outputs.cache-hit != 'true'
        run: cargo run --release -p lockbox_core --example compression_corpus -- .ci-compression-corpus

      - name: Run compression regression corpus
        env:
          LOCKBOX_COMPRESSION_CORPUS_DIR: ${{ github.workspace }}/rust/.ci-compression-corpus
        run: cargo test --release -p lockbox_core --test compression_regression -- --ignored --nocapture