ci.yml

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

env:
  CARGO_TERM_COLOR: always

jobs:
  test:
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
        rust: [stable]
    runs-on: ${{ matrix.os }}

    steps:
      - name: Install toolchain
        uses: actions-rs/toolchain@v1
        with:
          profile: minimal
          toolchain: ${{ matrix.rust }}
          override: true

      - name: Checkout code
        uses: actions/checkout@v3

      - name: Checkout BoringSSL
        uses: actions/checkout@v3
        with:
          repository: google/boringssl
          path: boringssl

      - name: Setup Ubuntu
        if: matrix.os == 'ubuntu-latest'
        run: |
          sudo apt-get -y update
          sudo apt-get -y install ninja-build

      - name: Setup macOS
        if: matrix.os == 'macos-latest'
        run: brew install ninja

      - name: Build code
        if: matrix.os != 'windows-latest'
        uses: actions-rs/cargo@v1
        with:
          command: build

      - name: Test code
        uses: actions-rs/cargo@v1
        with:
          command: test

      - name: BoGo
        if: matrix.os != 'windows-latest'
        run: BORINGSSL_ROOT=./boringssl ./bogo_shim/run.sh

  audit:
    needs: test
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Audit dependencies
        uses: EmbarkStudios/cargo-deny-action@v1
        # TODO: Check licenses, too.
        with:
          command: check bans advisories sources

  lint:
    needs: test
    runs-on: ubuntu-latest

    steps:
      - name: Install toolchain
        uses: actions-rs/toolchain@v1
        with:
          profile: minimal
          toolchain: stable
          override: true
          components: clippy

      - name: Checkout code
        uses: actions/checkout@v2

      - name: Check code formatting
        uses: actions-rs/cargo@v1
        with:
          command: fmt
          args: --all -- --check

      - name: Check for common mistakes and missed improvements
        uses: actions-rs/clippy-check@v1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}