Merge pull request #58 from cryspen/franziskus/hax-extract #117
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CI | |
on: | |
push: | |
branches: [main] | |
pull_request: | |
branches: [main] | |
workflow_dispatch: | |
env: | |
CARGO_TERM_COLOR: always | |
jobs: | |
test: | |
strategy: | |
matrix: | |
os: [ubuntu-latest, macos-latest, windows-latest] | |
rust: [stable] | |
runs-on: ${{ matrix.os }} | |
steps: | |
- name: Install toolchain | |
uses: actions-rs/toolchain@v1 | |
with: | |
profile: minimal | |
toolchain: ${{ matrix.rust }} | |
override: true | |
- name: Setup HACL toolchain | |
if: ${{ matrix.os == 'ubuntu-latest' }} | |
run: sudo apt-get install ninja-build | |
- name: Checkout code | |
uses: actions/checkout@v3 | |
- name: Checkout BoringSSL | |
uses: actions/checkout@v3 | |
with: | |
repository: google/boringssl | |
path: boringssl | |
- name: Setup Ubuntu | |
if: matrix.os == 'ubuntu-latest' | |
run: | | |
sudo apt-get -y update | |
sudo apt-get -y install ninja-build | |
- name: Setup macOS | |
if: matrix.os == 'macos-latest' | |
run: brew install ninja | |
- name: Build code | |
if: matrix.os != 'windows-latest' | |
uses: actions-rs/cargo@v1 | |
with: | |
command: build | |
- name: Test code | |
uses: actions-rs/cargo@v1 | |
with: | |
command: test | |
- name: BoGo | |
if: matrix.os != 'windows-latest' | |
run: BORINGSSL_ROOT=./boringssl ./bogo_shim/run.sh | |
- name: Test code /w hacl | |
if: ${{ matrix.os == 'ubuntu-latest' }} | |
uses: actions-rs/cargo@v1 | |
with: | |
command: test | |
args: --all --all-targets --no-default-features --features evercrypt | |
audit: | |
needs: test | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout code | |
uses: actions/checkout@v2 | |
- name: Audit dependencies | |
uses: EmbarkStudios/cargo-deny-action@v1 | |
# TODO: Check licenses, too. | |
with: | |
command: check bans advisories sources | |
lint: | |
needs: test | |
runs-on: ubuntu-latest | |
steps: | |
- name: Install toolchain | |
uses: actions-rs/toolchain@v1 | |
with: | |
profile: minimal | |
toolchain: stable | |
override: true | |
components: clippy | |
- name: Checkout code | |
uses: actions/checkout@v2 | |
- name: Check code formatting | |
uses: actions-rs/cargo@v1 | |
with: | |
command: fmt | |
args: --all -- --check | |
- name: Check for common mistakes and missed improvements | |
uses: actions-rs/clippy-check@v1 | |
with: | |
token: ${{ secrets.GITHUB_TOKEN }} |