omni-bridge/.github/workflows/security-analysis.yaml at 26826fce5c243b385ce208559cebc5cd4e0cef0a · Near-One/omni-bridge · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
name: "Security Analysis"

on:
  push:
    branches:
      - main
      - develop
  pull_request:
  workflow_dispatch:
    inputs:
      force_all_checks:
        description: "Trigger all checks even if files are unchanged"
        required: false
        default: "false"
        type: choice
        options: [ "false", "true" ]
      ignore_failures:
        description: "Don't block CI on failed security checks"
        required: false
        default: "false"
        type: choice
        options: [ "false", "true" ]

jobs:
  build:
    name: Static Analysis (${{ matrix.project }})
    runs-on: warp-ubuntu-2204-x64-16x
    strategy:
      fail-fast: false
      matrix:
        project: [near, solana, omni-relayer]

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Install Clippy
        id: clippy_setup
        continue-on-error: false
        run: rustup component add clippy-preview

      - name: Run Clippy
        id: clippy
        continue-on-error: true
        working-directory: ./${{ matrix.project }}
        run: |
          cargo clippy --all-targets --workspace --no-deps --lib -- \
          -D clippy::all -D clippy::pedantic \
          -D clippy::as_conversions \
          -A clippy::missing_errors_doc -A clippy::missing_panics_doc \
          -A clippy::must_use_candidate -A clippy::unreadable_literal \
          -A clippy::similar_names -A clippy::too_long_first_doc_paragraph