quality.yml

name: Quality

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

jobs:
  audit:
    name: Audit - crate security vulnerabilities
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - uses: ./.github/actions/install-rust
        with:
          with_cache: false
          tools: cargo-audit
          AWS_ACCESS_KEY_ID: ${{ secrets.ROBOT_AWS_ACCESS_KEY_ID}}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.ROBOT_AWS_SECRET_ACCESS_KEY}}

      - name: Cargo audit
        run: cargo audit

  lint:
    name: Lint - Clippy
    runs-on: ubuntu-latest-16-core
    env:
      CARGO_TERM_COLOR: always
      RUSTFLAGS: -Dwarnings
      RUST_BACKTRACE: 1
    steps:
      - name: Checkout topos repo
        uses: actions/checkout@v3

      - name: Install Rust
        uses: ./.github/actions/install-rust
        with:
          components: clippy
          AWS_ACCESS_KEY_ID: ${{ secrets.ROBOT_AWS_ACCESS_KEY_ID}}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.ROBOT_AWS_SECRET_ACCESS_KEY}}

      - name: Install Protoc
        uses: arduino/setup-protoc@v1

      - name: Checkout topos-smart-contracts repo
        uses: actions/checkout@v3
        with:
          repository: topos-protocol/topos-smart-contracts
          ref: ${{ env.CONTRACTS_REF }}
          path: contracts

      - name: Set up NodeJS
        uses: actions/setup-node@v3
        with:
          node-version: 16
          cache: "npm"
          cache-dependency-path: contracts/package-lock.json

      - name: Install dependencies
        working-directory: contracts
        run: npm ci

      - name: Build contracts
        working-directory: contracts
        run: npm run build

      - name: Move contract artifacts
        run: mv contracts/artifacts ./

      - name: Cargo xclippy
        run: cargo xclippy

  fmt:
    name: Check - Format
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - uses: ./.github/actions/install-rust
        with:
          with_cache: false
          components: rustfmt
          AWS_ACCESS_KEY_ID: ${{ secrets.ROBOT_AWS_ACCESS_KEY_ID}}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.ROBOT_AWS_SECRET_ACCESS_KEY}}

      - name: Cargo fmt
        run: cargo fmt --all -- --check

  msrv:
    name: Check - MSRV
    runs-on: ubuntu-latest-16-core
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - uses: ./.github/actions/install-rust
        with:
          msrv: true
          AWS_ACCESS_KEY_ID: ${{ secrets.ROBOT_AWS_ACCESS_KEY_ID}}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.ROBOT_AWS_SECRET_ACCESS_KEY}}

      - name: Cargo check
        run: cargo check --workspace --all-features --locked