sprout/.github/workflows/ci-code.yml

name: check

on:
  pull_request:
    branches:
    - main
  push:
    branches:
    - main

permissions:
  contents: read # Needed to checkout the repository.

concurrency:
  group: "${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}"
  # Only cancel superseded pull request runs, so every push to main is fully checked.
  cancel-in-progress: ${{ github.event_name == 'pull_request' }}

jobs:
  rustfmt:
    name: rustfmt
    runs-on: ubuntu-latest
    steps:
    - name: harden runner
      uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0
      with:
        egress-policy: audit

    - name: checkout
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false

    - name: 'install rust toolchain with rustfmt'
      run: |
        cargo version
        rustup component add rustfmt

    - name: 'cargo fmt'
      run: cargo fmt --all -- --check

  build:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        arch:
        - x86_64
        - aarch64
    env:
      TARGET_ARCH: "${{ matrix.arch }}"
    name: 'build ${{ matrix.arch }}'
    steps:
    - name: harden runner
      uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0
      with:
        egress-policy: audit

    - name: checkout
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false

    - name: 'install rust toolchain'
      run: |
        cargo version

    - name: cargo build
      run: cargo build --target "${TARGET_ARCH}-unknown-uefi"
  
  clippy:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        arch:
        - x86_64
        - aarch64
    env:
      TARGET_ARCH: "${{ matrix.arch }}"
    name: 'clippy ${{ matrix.arch }}'
    steps:
    - name: harden runner
      uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0
      with:
        egress-policy: audit

    - name: checkout
      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false

    - name: 'install rust toolchain with clippy'
      run: |
        cargo version
        rustup component add clippy

    - name: cargo clippy
      run: cargo clippy --target "${TARGET_ARCH}-unknown-uefi"