OPNsense-config-faker/.github/workflows/ci.yml at main · EvilBit-Labs/OPNsense-config-faker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

defaults:
  run:
    shell: bash

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

env:
  CARGO_TERM_COLOR: always
  CI: true
  GITHUB_ACTIONS: true

jobs:
  # Detect if Rust code has changed
  changes:
    runs-on: ubuntu-latest
    outputs:
      rust: ${{ steps.filter.outputs.rust }}
      docs: ${{ steps.filter.outputs.docs }}
    steps:
      - uses: actions/checkout@v5
      - uses: dorny/paths-filter@v3
        id: filter
        with:
          filters: |
            rust:
              - '**/*.rs'
              - '**/Cargo.toml'
              - '**/Cargo.lock'
              - '**/build.rs'
              - 'justfile'
              - 'rust-toolchain.toml'
              - 'deny.toml'
            docs:
              - 'docs/**'
              - '*.md'
              - '.kiro/**'
              - 'spec/**'

  # Code quality checks - always run
  quality:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: dtolnay/rust-toolchain@1.90
        with:
          components: rustfmt, clippy

      - name: Install just
        uses: extractions/setup-just@v3

      - name: Cache Rust dependencies
        uses: Swatinem/rust-cache@v2

      - name: Rustfmt Check
        uses: actions-rust-lang/rustfmt@v1

      - name: Run clippy (all features)
        run: cargo clippy --all-targets --all-features -- -D warnings

  test:
    runs-on: ubuntu-latest
    needs: changes
    if: needs.changes.outputs.rust == 'true'
    steps:
      - uses: actions/checkout@v5

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@1.90
        with:
          components: rustfmt, clippy

      - name: Install cargo-nextest
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-nextest

      - name: Run tests (all features)
        run: cargo nextest run --all-features

      - name: Build release
        run: cargo build --release --all-features

  # Test cross-platform - only run when Rust code changes
  test-cross-platform:
    strategy:
      matrix:
        include:
          # Primary Support - Linux
          - os: ubuntu-latest
            platform: "Linux"
          # Primary Support - macOS (using available runners)
          - os: macos-latest
            platform: "macOS"
          # Primary Support - Windows
          - os: windows-latest
            platform: "Windows"

    runs-on: ${{ matrix.os }}
    needs: changes
    if: needs.changes.outputs.rust == 'true'
    steps:
      - uses: actions/checkout@v5

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@1.90

      - name: Install cargo-nextest
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-nextest

      # Run tests and build the release binary
      - run: cargo nextest run --all-features
      - run: cargo build --release --all-features

  # Generate coverage for TLS-enabled builds - only run when Rust code changes
  coverage:
    runs-on: ubuntu-latest
    needs: [changes, test, test-cross-platform]
    if: needs.changes.outputs.rust == 'true'
    steps:
      - uses: actions/checkout@v5

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@1.90
        with:
          components: llvm-tools

      - name: Install cargo-llvm-cov
        uses: taiki-e/install-action@v2
        with:
          tool: cargo-llvm-cov

      - name: Generate coverage
        run: cargo llvm-cov --all-features --no-report

      - name: Combine coverage reports
        run: cargo llvm-cov report --lcov --output-path lcov.info

      - name: Upload to Codecov
        uses: codecov/codecov-action@v5
        with:
          files: lcov.info
          fail_ci_if_error: false
          token: ${{ secrets.CODECOV_TOKEN }}
          slug: EvilBit-Labs/OPNsense-config-faker
      - uses: qltysh/qlty-action/coverage@v2
        with:
          token: ${{ secrets.QLTY_COVERAGE_TOKEN }}
          files: lcov.info