-
Notifications
You must be signed in to change notification settings - Fork 21
152 lines (143 loc) · 4.53 KB
/
build.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
name: Build
on:
push:
branches:
- master
tags:
- "v*"
pull_request:
branches:
- master
jobs:
security_audit:
name: security_audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
submodules: recursive
- name: Install cargo-audit from crates.io
uses: baptiste0928/cargo-install@v3
with:
crate: cargo-audit
- run: cargo audit --ignore RUSTSEC-2022-0093 --ignore RUSTSEC-2023-0065 --ignore RUSTSEC-2024-0336
lint:
name: lint
runs-on: big-runner-1
steps:
- uses: actions/checkout@v4
with:
submodules: recursive
- uses: actions-rust-lang/setup-rust-toolchain@v1
with:
components: rustfmt, clippy
toolchain: nightly-2023-10-05
- name: Install cargo-sort from crates.io
uses: baptiste0928/cargo-install@v3
with:
crate: cargo-sort
- run: cargo +nightly-2023-10-05 sort --workspace --check
- run: cargo +nightly-2023-10-05 fmt --all --check
- run: cargo +nightly-2023-10-05 clippy --all-features --all-targets --tests -- -D warnings
udeps:
name: udeps
runs-on: big-runner-1
steps:
- uses: actions/checkout@v4
with:
submodules: recursive
- uses: actions-rust-lang/setup-rust-toolchain@v1
with:
toolchain: nightly-2023-10-05
- name: Install cargo-udeps from crates.io
uses: baptiste0928/cargo-install@v3
with:
crate: cargo-udeps
version: 0.1.47 # Remove once anchor 0.30 is merged
- run: cargo +nightly-2023-10-05 udeps --all-features --all-targets --tests
verified_build:
name: verified_build
runs-on: big-runner-1
steps:
- uses: actions/checkout@v4
with:
submodules: recursive
- uses: actions-rust-lang/setup-rust-toolchain@v1
- name: Install solana-verify from crates.io
uses: baptiste0928/cargo-install@v3
with:
crate: solana-verify
- name: Install anchor-cli from crates.io
uses: baptiste0928/cargo-install@v3
with:
crate: anchor-cli
version: "0.29.0"
- name: install solana toolsuite
run: sh -c "$(curl -sSfL https://release.solana.com/v1.16.20/install)"
- name: add to path
run: echo "/home/runner/.local/share/solana/install/active_release/bin" >> $GITHUB_PATH
# build the program and IDL; exit if error
- run: anchor build --idl idl --program-name validator_history
- name: Check for diff on IDL
run: git diff --exit-code
# run verified build
- run: solana-verify build --library-name validator_history
# upload the IDL and verified build
- name: Upload validator_history.so
uses: actions/upload-artifact@v4
with:
name: validator_history.so
path: target/deploy/validator_history.so
- name: Upload IDL
uses: actions/upload-artifact@v4
with:
name: validator_history.json
path: programs/validator-history/idl/validator_history.json
# tests run on verified build
test:
name: test
runs-on: big-runner-1
needs:
- verified_build
steps:
- uses: actions/checkout@v4
with:
submodules: recursive
- uses: actions-rust-lang/setup-rust-toolchain@v1
- uses: actions/download-artifact@v4
with:
name: validator_history.so
path: target/deploy/
- name: cargo test
run: cargo test --all-targets --all-features --color auto
shell: bash
env:
RUST_LOG: trace
SBF_OUT_DIR: ${{ github.workspace }}/target/deploy
# release only runs on tagged commits
# it should wait for all the other steps to finish, to ensure releases are the highest quality
# after waiting, it will download the verified build and IDL from the verified_build step and release the artifacts
release:
name: release
runs-on: big-runner-1
if: startsWith(github.ref, 'refs/tags/')
needs:
- security_audit
- lint
- udeps
- verified_build
- test
steps:
- uses: actions/download-artifact@v4
with:
name: validator_history.so
- uses: actions/download-artifact@v4
with:
name: validator_history.json
- name: release
uses: softprops/action-gh-release@v1
if: startsWith(github.ref, 'refs/tags/')
with:
files: |
validator_history.so
validator_history.json