refactor(ci): streamline GitHub workflows
Metrics Collection / collect-metrics (push) Has been cancelled
Code Quality / quality-checks (push) Has been cancelled
Security Scan / security-audit (push) Has been cancelled

- remove build.yml (redundant with release.yml)
- security.yml: remove duplicate cargo deny check (advisories redundant with full check)
- metrics.yml: remove unused rustfmt/clippy components and no-op summary step
- quality.yml: remove duplicate cargo deny check (already runs in security workflow)
This commit is contained in:
2026-03-17 19:52:38 +01:00
parent 446426ea47
commit 50c5de5371
4 changed files with 3 additions and 260 deletions
-227
View File
@@ -1,227 +0,0 @@
name: Multi-Distro Build
on:
push:
branches: ["master", "main"]
pull_request:
branches: ["master", "main"]
workflow_dispatch:
env:
CARGO_TERM_COLOR: always
jobs:
build-ubuntu:
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- features: "default"
args: ""
- features: "no-default-features"
args: "--no-default-features"
steps:
- uses: actions/checkout@v4
- uses: Swatinem/rust-cache@v2
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Install system dependencies
run: |
sudo apt-get update
sudo apt-get install -y \
llvm clang libclang-dev \
pkg-config \
libglib2.0-dev libcairo2-dev libpango1.0-dev libatk1.0-dev \
libpam0g-dev libdbus-1-dev \
libwayland-dev libxkbcommon-dev
- name: Build (${{ matrix.features }})
run: cargo build --verbose ${{ matrix.args }}
- name: Run tests
run: cargo test --verbose ${{ matrix.args }}
- name: Build release for size check
run: cargo build --release ${{ matrix.args }}
- name: Check binary size
run: |
size=$(wc -c < target/release/rustlock)
echo "Binary size (${{ matrix.features }}): $size bytes"
if [ "${{ matrix.features }}" = "no-default-features" ] && [ $size -gt 3000000 ]; then
echo "❌ Binary size exceeds 3MB threshold for no-networking build"
exit 1
elif [ "${{ matrix.features }}" = "default" ] && [ $size -gt 5000000 ]; then
echo "❌ Binary size exceeds 5MB threshold for networking build"
exit 1
fi
echo "✅ Binary size within limits"
build-debian:
runs-on: ubuntu-latest
container: debian:stable-slim
strategy:
fail-fast: false
matrix:
include:
- features: "default"
args: ""
- features: "no-default-features"
args: "--no-default-features"
steps:
- uses: actions/checkout@v4
- name: Install system dependencies
run: |
apt-get update
apt-get install -y \
curl \
llvm clang libclang-dev \
pkg-config \
libglib2.0-dev libcairo2-dev libpango1.0-dev libatk1.0-dev \
libgdk-pixbuf-2.0-dev libpam0g-dev libdbus-1-dev \
libwayland-dev libxkbcommon-dev
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Build (${{ matrix.features }})
run: cargo build --verbose ${{ matrix.args }}
- name: Run tests
run: cargo test --verbose ${{ matrix.args }}
- name: Build release for size check
run: cargo build --release ${{ matrix.args }}
- name: Check binary size
run: |
size=$(wc -c < target/release/rustlock)
echo "Binary size (${{ matrix.features }}): $size bytes"
if [ "${{ matrix.features }}" = "no-default-features" ] && [ $size -gt 3000000 ]; then
echo "❌ Binary size exceeds 3MB threshold for no-networking build"
exit 1
elif [ "${{ matrix.features }}" = "default" ] && [ $size -gt 5000000 ]; then
echo "❌ Binary size exceeds 5MB threshold for networking build"
exit 1
fi
echo "✅ Binary size within limits"
build-fedora:
runs-on: ubuntu-latest
container: fedora:latest
strategy:
fail-fast: false
matrix:
include:
- features: "default"
args: ""
- features: "no-default-features"
args: "--no-default-features"
steps:
- uses: actions/checkout@v4
- name: Install system dependencies
run: |
dnf install -y \
curl \
llvm clang clang-devel \
pkgconfig \
glib2-devel cairo-devel cairo-gobject-devel pango-devel atk-devel \
gdk-pixbuf2-devel pam-devel dbus-devel \
wayland-devel libxkbcommon-devel
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Build (${{ matrix.features }})
run: cargo build --verbose ${{ matrix.args }}
- name: Run tests
run: cargo test --verbose ${{ matrix.args }}
- name: Build release for size check
run: cargo build --release ${{ matrix.args }}
- name: Check binary size
run: |
size=$(wc -c < target/release/rustlock)
echo "Binary size (${{ matrix.features }}): $size bytes"
if [ "${{ matrix.features }}" = "no-default-features" ] && [ $size -gt 3000000 ]; then
echo "❌ Binary size exceeds 3MB threshold for no-networking build"
exit 1
elif [ "${{ matrix.features }}" = "default" ] && [ $size -gt 5000000 ]; then
echo "❌ Binary size exceeds 5MB threshold for networking build"
exit 1
fi
echo "✅ Binary size within limits"
build-arch:
runs-on: ubuntu-latest
container: archlinux:latest
strategy:
fail-fast: false
matrix:
include:
- features: "default"
args: ""
- features: "no-default-features"
args: "--no-default-features"
steps:
- uses: actions/checkout@v4
- name: Install system dependencies
run: |
pacman -Sy --noconfirm \
base-devel \
llvm clang pkgconf \
glib2 cairo pango atk gdk-pixbuf2 \
pam dbus \
wayland libxkbcommon
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Build (${{ matrix.features }})
run: cargo build --verbose ${{ matrix.args }}
- name: Run tests
run: cargo test --verbose ${{ matrix.args }}
- name: Build release for size check
run: cargo build --release ${{ matrix.args }}
- name: Check binary size
run: |
size=$(wc -c < target/release/rustlock)
echo "Binary size (${{ matrix.features }}): $size bytes"
if [ "${{ matrix.features }}" = "no-default-features" ] && [ $size -gt 3000000 ]; then
echo "❌ Binary size exceeds 3MB threshold for no-networking build"
exit 1
elif [ "${{ matrix.features }}" = "default" ] && [ $size -gt 5000000 ]; then
echo "❌ Binary size exceeds 5MB threshold for networking build"
exit 1
fi
echo "✅ Binary size within limits"
build-opensuse:
runs-on: ubuntu-latest
container: opensuse/tumbleweed:latest
strategy:
fail-fast: false
matrix:
include:
- features: "default"
args: ""
- features: "no-default-features"
args: "--no-default-features"
steps:
- uses: actions/checkout@v4
- name: Install system dependencies
run: |
zypper install -y \
curl \
llvm clang-devel \
pkgconfig \
glib2-devel cairo-devel pango-devel atk-devel \
gdk-pixbuf-devel pam-devel dbus-1-devel \
wayland-devel libxkbcommon-devel
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Build (${{ matrix.features }})
run: cargo build --verbose ${{ matrix.args }}
- name: Run tests
run: cargo test --verbose ${{ matrix.args }}
- name: Build release for size check
run: cargo build --release ${{ matrix.args }}
- name: Check binary size
run: |
size=$(wc -c < target/release/rustlock)
echo "Binary size (${{ matrix.features }}): $size bytes"
if [ "${{ matrix.features }}" = "no-default-features" ] && [ $size -gt 3000000 ]; then
echo "❌ Binary size exceeds 3MB threshold for no-networking build"
exit 1
elif [ "${{ matrix.features }}" = "default" ] && [ $size -gt 5000000 ]; then
echo "❌ Binary size exceeds 5MB threshold for networking build"
exit 1
fi
echo "✅ Binary size within limits"
+1 -21
View File
@@ -21,10 +21,8 @@ jobs:
- uses: actions/checkout@v4
- uses: Swatinem/rust-cache@v2
- name: Install Rust with tools
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
with:
components: rustfmt, clippy
@@ -77,21 +75,3 @@ jobs:
name: dependency-graph
path: deps.dot
retention-days: 30
- name: Metrics summary
run: |
echo "=== Build Metrics Summary ==="
echo ""
echo "📊 Coverage: HTML and Lcov reports generated"
echo "📈 LOC: Lines of code counted and saved"
echo "🔗 Dependencies: Graph visualization available"
echo ""
echo "Artifacts available for 30 days:"
echo " - coverage-report/"
echo " - loc-metrics/loc.json"
echo " - dependency-graph/deps.dot"
echo ""
echo "Next steps:"
echo "1. Review coverage reports to identify untested code"
echo "2. Monitor LOC growth over time"
echo "3. Analyze dependency graph for optimization opportunities"
-6
View File
@@ -38,12 +38,6 @@ jobs:
- name: Run clippy
run: cargo clippy -- -D warnings
- name: Install cargo-deny
run: cargo install cargo-deny
- name: Check dependencies with cargo-deny
run: cargo deny check
- name: Run unit tests
run: cargo test --quiet
+1 -5
View File
@@ -33,10 +33,7 @@ jobs:
- name: Run cargo audit
run: cargo audit
- name: Run cargo deny (advisories only)
run: cargo deny check advisories
- name: Run cargo deny (full check)
- name: Run cargo deny
run: cargo deny check
- name: Generate Software Bill of Materials (SBOM)
@@ -65,4 +62,3 @@ jobs:
echo "✅ Outdated dependencies checked"
echo ""
echo "Next scheduled scan: Weekly (Sunday 00:00 UTC)"
echo "Manual trigger: Click 'Run workflow' in GitHub Actions"