verify.yml

name: "Verify"
on:
  push:
    branches:
      - main
  pull_request:
  workflow_dispatch:
jobs:
  verify:
    timeout-minutes: 5
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable
          components: rustfmt, clippy
      - name: Annotate commit with clippy warnings
        uses: auguwu/clippy-action@1.4.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          args: --deny warnings
      - name: Security audit
        uses: actions-rs/audit-check@v1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Install cargo binstall
        uses: cargo-bins/cargo-binstall@main
      - name: Run cargo-tarpaulin
        run: |
          cargo binstall cargo-tarpaulin --no-confirm
          cargo tarpaulin
      - name: Upload to codecov.io
        uses: codecov/codecov-action@v4
        with:
          token: ${{secrets.CODECOV_TOKEN}}
      - name: Archive code coverage results
        uses: actions/upload-artifact@v4
        with:
          name: code-coverage-report
          path: cobertura.xml