Merge pull request #1 from SentinelOps-CI/feat/service-layering-and-h… #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: SpecCursor CI | ||
|
Check failure on line 1 in .github/workflows/speccursor.yml
|
||
| # Fast primary gate for PRs and main. Extended qualification lives in qualify.yml. | ||
| on: | ||
| push: | ||
| branches: [main, develop] | ||
| pull_request: | ||
| branches: [main, develop] | ||
| workflow_dispatch: | ||
| concurrency: | ||
| group: ci-${{ github.ref }} | ||
| cancel-in-progress: true | ||
| env: | ||
| PNPM_VERSION: '8.15.0' | ||
| NODE_ENV: test | ||
| jobs: | ||
| quality: | ||
| name: Verify, type-check, test, audit | ||
| runs-on: ubuntu-latest | ||
| timeout-minutes: 25 | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: pnpm/action-setup@v4 | ||
| with: | ||
| version: ${{ env.PNPM_VERSION }} | ||
| - uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: '20' | ||
| cache: pnpm | ||
| - name: Install | ||
| run: pnpm install --frozen-lockfile | ||
| - name: Architecture verification | ||
| run: node verify-implementation.js | ||
| - name: Format | ||
| run: pnpm format:check | ||
| - name: Lint | ||
| run: pnpm lint | ||
| - name: Type check | ||
| run: pnpm type-check | ||
| - name: Unit and integration tests | ||
| run: pnpm test:unit | ||
| - name: Security audit | ||
| run: | | ||
| pnpm audit --audit-level moderate | ||
| node scripts/security-audit.mjs | ||
| rust-worker: | ||
| name: Rust worker | ||
| runs-on: ubuntu-latest | ||
| timeout-minutes: 30 | ||
| if: hashFiles('workers/rust-worker/Cargo.toml') != '' | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: actions-rust-lang/setup-rust-toolchain@v1 | ||
| with: | ||
| toolchain: stable | ||
| components: clippy | ||
| - name: Test and clippy | ||
| working-directory: workers/rust-worker | ||
| run: | | ||
| cargo test --verbose | ||
| cargo clippy --all-targets --all-features -- -D warnings | ||
| lean-engine: | ||
| name: Lean engine | ||
| runs-on: ubuntu-latest | ||
| timeout-minutes: 45 | ||
| if: hashFiles('workers/lean-engine/lakefile.lean') != '' | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - name: Install elan | ||
| run: | | ||
| curl -sSf https://raw.githubusercontent.com/leanprover/elan/master/elan-init.sh | sh -s -- -y --default-toolchain none | ||
| echo "$HOME/.elan/bin" >> "$GITHUB_PATH" | ||
| - name: Lake build | ||
| working-directory: workers/lean-engine | ||
| run: lake build | ||
