feat(whoami): fingerprint signal inventory app #1251
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| merge_group: | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| CI: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| check: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0 | |
| with: | |
| # Keep in lockstep with the vite-plus catalog pin (renovate-managed). | |
| # renovate: datasource=npm depName=vite-plus | |
| version: "0.2.4" | |
| cache: true | |
| node-version-file: package.json | |
| run-install: true | |
| sfw: true | |
| - run: vp run check | |
| - run: vp run lint:impeccable | |
| - run: vp run test | |
| - run: vp run manypkg | |
| - run: vp dedupe --check -- --prefer-offline | |
| - run: vp run typesync:check | |
| - run: vp run lint:knip | |
| - run: vp run lint:knip:prod | |
| build: | |
| runs-on: ubuntu-latest | |
| env: | |
| DATABASE_URL: "file:/tmp/build.db" | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0 | |
| with: | |
| # Keep in lockstep with the vite-plus catalog pin (renovate-managed). | |
| # renovate: datasource=npm depName=vite-plus | |
| version: "0.2.4" | |
| cache: true | |
| node-version-file: package.json | |
| run-install: true | |
| sfw: true | |
| - name: Write app env | |
| run: | | |
| echo "DATABASE_URL=$DATABASE_URL" > apps/collegemap/.env | |
| echo "DATABASE_URL=$DATABASE_URL" > apps/grove/.env | |
| - run: vp run build | |
| manager-rust: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: apps/manager | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install tmux | |
| run: sudo apt-get update -q && sudo apt-get install -y -q tmux && tmux -V | |
| - name: Install pinned toolchain (rust-toolchain.toml) | |
| run: rustup toolchain install && rustup component add rustfmt clippy | |
| - run: cargo fmt --check | |
| - run: cargo clippy --all-targets --locked -- -D warnings | |
| - run: cargo test --locked | |
| - name: tmux integration tests (scratch sockets only) | |
| run: N12_TMUX_IT=1 cargo test --locked --test tmux_it -- --ignored | |
| courier-rust: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: apps/courier | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install system build dependencies | |
| run: sudo apt-get update -q && sudo apt-get install -y -q libsqlite3-dev pkg-config libssl-dev | |
| - name: Install pinned toolchain (rust-toolchain.toml) | |
| run: rustup toolchain install && rustup component add rustfmt clippy | |
| - run: cargo fmt --all --check | |
| - run: cargo clippy --workspace --all-targets --locked -- -W clippy::pedantic -D warnings | |
| - run: cargo build --workspace --all-targets --locked | |
| - run: cargo test --workspace --locked | |
| dispatcher-rust: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: apps/dispatcher | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install pinned toolchain (rust-toolchain.toml) | |
| run: rustup toolchain install && rustup component add rustfmt clippy | |
| - run: cargo fmt --check | |
| - run: cargo clippy --all-targets --locked -- -D warnings | |
| - run: cargo test --locked | |
| control-plane-rust: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: apps/control-plane | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install pinned toolchain (rust-toolchain.toml) | |
| run: rustup toolchain install && rustup component add rustfmt clippy | |
| - run: cargo fmt --check | |
| - run: cargo clippy --all-targets --locked -- -D warnings | |
| - run: cargo test --locked | |
| box-agent-rust: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: apps/box-agent | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Install pinned toolchain (rust-toolchain.toml) | |
| run: rustup toolchain install && rustup component add rustfmt clippy | |
| - run: cargo fmt --check | |
| - run: cargo clippy --all-targets --locked -- -D warnings | |
| - run: cargo test --locked | |
| typos: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0 | |
| link-check: | |
| timeout-minutes: 2 | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| with: | |
| path: .lycheecache | |
| key: cache-lychee-${{ github.sha }} | |
| restore-keys: cache-lychee- | |
| - uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0 | |
| with: | |
| args: --cache --max-cache-age 1d . | |
| token: ${{ github.token }} |