GraphHunter/.github/workflows/ci.yml at main · Base4Security/GraphHunter · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1

jobs:
  # ── Rust core crate ────────────────────────────────────────────────
  core-tests:
    name: Core (cargo test)
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: graph_hunter_core
      - name: Run tests (skip long benchmarks)
        run: cargo test --manifest-path graph_hunter_core/Cargo.toml -- --skip benchmark
      - name: Run tests (geoip feature)
        run: cargo test --manifest-path graph_hunter_core/Cargo.toml --features geoip -- --skip benchmark

  # ── Tauri backend compile check ────────────────────────────────────
  tauri-check:
    name: Tauri (cargo check)
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
      - name: Install system deps (Tauri v2 on Linux)
        run: |
          sudo apt-get update
          sudo apt-get install -y \
            libwebkit2gtk-4.1-dev libappindicator3-dev \
            librsvg2-dev patchelf libgtk-3-dev libsoup-3.0-dev \
            libjavascriptcoregtk-4.1-dev
      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: app/src-tauri
      # --no-default-features skips custom-protocol which requires a
      # pre-built frontend dist/. We only need to verify Rust compiles.
      - name: Cargo check
        run: cargo check --manifest-path app/src-tauri/Cargo.toml --no-default-features

  # ── Frontend (TypeScript + Vitest) ─────────────────────────────────
  frontend:
    name: Frontend (tsc + vitest)
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm
          cache-dependency-path: app/package-lock.json
      - name: Install deps
        run: npm ci
        working-directory: app
      - name: Type check
        run: npx tsc --noEmit
        working-directory: app
      - name: Unit tests
        run: npm test
        working-directory: app

  # ── MCP server ─────────────────────────────────────────────────────
  mcp:
    name: MCP (tsc build)
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm
          cache-dependency-path: graph-hunter-mcp/package-lock.json
      - name: Install deps
        run: npm ci
        working-directory: graph-hunter-mcp
      - name: Build
        run: npm run build
        working-directory: graph-hunter-mcp

  # ── Clippy lint (core) ─────────────────────────────────────────────
  clippy:
    name: Clippy
    runs-on: ubuntu-latest
    timeout-minutes: 15
    steps:
      - uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          components: clippy
      - uses: Swatinem/rust-cache@v2
        with:
          workspaces: graph_hunter_core
      # Warn on all lints but only deny correctness issues. The codebase
      # has pre-existing style warnings (collapsible_if, etc.) that will
      # be cleaned up incrementally — blocking CI on them is premature.
      - name: Clippy (core)
        run: cargo clippy --manifest-path graph_hunter_core/Cargo.toml -- -W clippy::all -D clippy::correctness