devkit/.github/workflows/rust-sdk-check.yml at master · mochiOS/devkit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
name: Check standalone Rust application SDK
on:
  push:
    branches: [staging, main, master]
    paths: ['rust-sdk/**', 'actions/setup-rust-sdk/**', 'crates/kome/**', 'crates/msign/**', '.github/workflows/rust-sdk-check.yml']
  pull_request:
    paths: ['rust-sdk/**', 'actions/setup-rust-sdk/**', 'crates/kome/**', 'crates/msign/**', '.github/workflows/rust-sdk-check.yml']
permissions:
  contents: read
jobs:
  check:
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
        with:
          persist-credentials: false
      - run: python3 -m unittest discover -s rust-sdk/tests -v
  signer:
    runs-on: ubuntu-24.04
    timeout-minutes: 30
    env:
      CARGO_BUILD_JOBS: '4'
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
        with:
          persist-credentials: false
      - id: sdk
        uses: ./actions/setup-rust-sdk
        with:
          output: ${{ runner.temp }}/mochios-rust-sdk
      - name: Test and build the trusted signer without application sources or credentials
        env:
          SDK: ${{ steps.sdk.outputs.sdk }}
          HELPER: ${{ steps.sdk.outputs.helper }}
        run: python3 "$(dirname "$HELPER")/host-tool.py" --sdk "$SDK" --tool msign --output "$RUNNER_TEMP/host-tools" --test
      - name: Test and build Kome without production credentials
        env:
          SDK: ${{ steps.sdk.outputs.sdk }}
          HELPER: ${{ steps.sdk.outputs.helper }}
        run: python3 "$(dirname "$HELPER")/host-tool.py" --sdk "$SDK" --tool kome --output "$RUNNER_TEMP/host-tools" --test