Skip to content
building

build(deps): bump github/codeql-action from 4 to 4.37.3 #1549

Sign in to view logs

build(deps): bump github/codeql-action from 4 to 4.37.3

build(deps): bump github/codeql-action from 4 to 4.37.3 #1549

Workflow file for this run

.github/workflows/building.yml at 6165355
name: building
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
merge_group:
permissions:
contents: read
env:
CARGO_TERM_COLOR: always
jobs:
check-code-style:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- name: Setup Rust toolchain
uses: moonrepo/setup-rust@v1
with:
channel: nightly
components: rustfmt
cache: false
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Check code format with dprint
uses: dprint/check@v2.3
lint-debug:
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
security-events: write
steps:
- uses: actions/checkout@v7
- name: Optimize APT
run: |
sudo apt-mark hold firefox
echo 'set man-db/auto-update false' | sudo debconf-communicate > /dev/null
sudo dpkg-reconfigure man-db
- name: Install dependencies
run: |
sudo apt-get update
sudo apt-get upgrade -y
sudo apt-get install -y wget clang
- name: Setup Rust toolchain
uses: moonrepo/setup-rust@v1
with:
channel: stable
bins: cargo-hack, cargo-deny, clippy-sarif, sarif-fmt, cargo-nextest
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Setup mold
uses: rui314/setup-mold@v1
- name: Setup protoc
uses: arduino/setup-protoc@master
with:
version: v31.x
repo-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup sccache
uses: mozilla-actions/sccache-action@v0.0.10
- name: Enable sccache
run: |
echo "SCCACHE_GHA_ENABLED=true" >> "$GITHUB_ENV"
echo "RUSTC_WRAPPER=sccache" >> "$GITHUB_ENV"
- name: Setup buf & lint protobuf files
uses: bufbuild/buf-action@v1
with:
# Don't push proto files to BSR automatically.
# We will do it in a separate workflow in the future.
push: false
- name: Run clippy lint
run: |
cargo hack clippy --all-targets --each-feature --workspace --message-format json --locked |
clippy-sarif |
tee rust-clippy-results.sarif |
sarif-fmt
continue-on-error: true
- name: Upload analysis results to GitHub
uses: github/codeql-action/upload-sarif@v4.37.3
with:
sarif_file: rust-clippy-results.sarif
wait-for-processing: true
- name: Check dependency graph
run: cargo deny --all-features --workspace check
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- name: Optimize APT
run: |
sudo apt-mark hold firefox
echo 'set man-db/auto-update false' | sudo debconf-communicate > /dev/null
sudo dpkg-reconfigure man-db
- name: Install dependencies
run: |
sudo apt-get update
sudo apt-get upgrade -y
sudo apt-get install -y wget clang
- name: Setup Rust toolchain
uses: moonrepo/setup-rust@v1
with:
channel: stable
bins: cargo-hack, cargo-deny, clippy-sarif, sarif-fmt, cargo-nextest
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Setup mold
uses: rui314/setup-mold@v1
- name: Setup buf
uses: bufbuild/buf-action@v1
with:
setup_only: true
- name: Setup protoc
uses: arduino/setup-protoc@master
with:
version: v31.x
repo-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup sccache
uses: mozilla-actions/sccache-action@v0.0.10
- name: Enable sccache
run: |
echo "SCCACHE_GHA_ENABLED=true" >> "$GITHUB_ENV"
echo "RUSTC_WRAPPER=sccache" >> "$GITHUB_ENV"
- name: Run tests
run: >
cargo hack nextest --each-feature --verbose
run --workspace --locked --no-tests=pass --retries 3
lint-release:
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
steps:
- uses: actions/checkout@v7
- name: Optimize APT
run: |
sudo apt-mark hold firefox
echo 'set man-db/auto-update false' | sudo debconf-communicate > /dev/null
sudo dpkg-reconfigure man-db
- name: Install dependencies
run: |
sudo apt-get update
sudo apt-get upgrade -y
sudo apt-get install -y wget clang
- name: Setup Rust toolchain
uses: moonrepo/setup-rust@v1
with:
channel: stable
bins: cargo-hack, cargo-deny, clippy-sarif, sarif-fmt, cargo-nextest
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Setup mold
uses: rui314/setup-mold@v1
- name: Setup buf
uses: bufbuild/buf-action@v1
with:
setup_only: true
- name: Setup protoc
uses: arduino/setup-protoc@master
with:
version: v31.x
repo-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup sccache
uses: mozilla-actions/sccache-action@v0.0.10
- name: Enable sccache
run: |
echo "SCCACHE_GHA_ENABLED=true" >> "$GITHUB_ENV"
echo "RUSTC_WRAPPER=sccache" >> "$GITHUB_ENV"
- name: Run clippy lint
run: |
cargo hack clippy --each-feature --workspace --message-format json --locked --release |
clippy-sarif |
tee rust-clippy-results.sarif |
sarif-fmt
continue-on-error: true
- name: Upload analysis results to GitHub
uses: github/codeql-action/upload-sarif@v4.37.3
with:
sarif_file: rust-clippy-results.sarif
wait-for-processing: true
msrv:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- name: Optimize APT
run: |
sudo apt-mark hold firefox
echo 'set man-db/auto-update false' | sudo debconf-communicate >/dev/null
sudo dpkg-reconfigure man-db
- name: Install dependencies
run: |
sudo apt-get update
sudo apt-get upgrade -y
sudo apt-get install -y wget clang
- name: Setup Rust toolchain
uses: moonrepo/setup-rust@v1
with:
channel: "1.94"
bins: cargo-hack, cargo-nextest
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Setup mold
uses: rui314/setup-mold@v1
- name: Setup buf
uses: bufbuild/buf-action@v1
with:
setup_only: true
- name: Setup protoc
uses: arduino/setup-protoc@master
with:
version: v31.x
repo-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup sccache
uses: mozilla-actions/sccache-action@v0.0.10
- name: Check for MSRV compliance
env:
SCCACHE_GHA_ENABLED: true
RUSTC_WRAPPER: sccache
run: >
cargo hack nextest --rust-version --each-feature --verbose
run --workspace --locked --no-tests=pass --retries 3
pkg-deb:
runs-on: ubuntu-22.04
steps:
- uses: actions/checkout@v7
- name: Optimize APT
run: |
sudo apt-mark hold firefox
echo 'set man-db/auto-update false' | sudo debconf-communicate >/dev/null
sudo dpkg-reconfigure man-db
- name: Install dependencies
run: |
sudo apt-get update
sudo apt-get upgrade -y
sudo apt-get install -y wget lintian clang
- name: Setup Rust toolchain
uses: moonrepo/setup-rust@v1
with:
channel: stable
bins: cargo-deb
cache: false
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Setup mold
uses: rui314/setup-mold@v1
- name: Setup buf
uses: bufbuild/buf-action@v1
with:
setup_only: true
- name: Setup protoc
uses: arduino/setup-protoc@master
with:
version: v31.x
repo-token: ${{ secrets.GITHUB_TOKEN }}
- name: Setup sccache
uses: mozilla-actions/sccache-action@v0.0.10
- name: Enable sccache
run: |
echo "SCCACHE_GHA_ENABLED=true" >> "$GITHUB_ENV"
echo "RUSTC_WRAPPER=sccache" >> "$GITHUB_ENV"
- name: Build Debian package
run: cargo xtask dist deb && dpkg-deb -c target/debian/*.deb
- name: Lint Debian package
run: lintian -i target/debian/*.deb
- uses: actions/upload-artifact@v7
with:
name: rsjudge-deb
path: target/debian/*.deb
pkg-rpm:
runs-on: ubuntu-latest
container: fedora:41
steps:
- uses: actions/checkout@v7
- name: Install dependencies
run: |
sudo dnf install -y clang mold protobuf-compiler
- name: Setup Rust toolchain
uses: moonrepo/setup-rust@v1
with:
channel: stable
bins: cargo-generate-rpm
cache: false
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Setup buf
uses: bufbuild/buf-action@v1
with:
setup_only: true
- name: Setup sccache
uses: mozilla-actions/sccache-action@v0.0.10
- name: Enable sccache
run: |
echo "SCCACHE_GHA_ENABLED=true" >> "$GITHUB_ENV"
echo "RUSTC_WRAPPER=sccache" >> "$GITHUB_ENV"
- name: Build RPM package
run: cargo xtask dist rpm && rpm -qlp target/generate-rpm/*.rpm
- uses: actions/upload-artifact@v7
with:
name: rsjudge-rpm
path: target/generate-rpm/*.rpm