CI and Quality

CI and Quality

GitHub Actions — rust.yml

Triggers: push/PR to main.

Step	Notes
Build / test	cargo build, cargo test
Coverage	cargo-llvm-cov → lcov.info → Codecov if CODECOV_TOKEN
fmt	cargo fmt --all -- --check
Clippy gate	-D warnings (hard fail)
reviewdog	Second clippy JSON pipe for PR comments
Snyk	OSS (+ SBOM attempt) and SAST; skip cleanly if no SNYK_TOKEN

Actions are SHA-pinned. Checkout uses persist-credentials: false.

Azure Pipelines

Jobs: Linux (fmt+build+test+clippy), macOS (build+test), Windows (pwsh build+test). Uses preinstalled Rust on hosted images.

Codecov (codecov.yml)

Project status target auto with 1% threshold; patch informational.

Qodana

qodana.yaml — qodana-rust, recommended profile, license checks. Workflow: qodana_code_quality.yml.

Dependabot

.github/dependabot.yml for Action bumps.

Local bar

cargo fmt --all -- --check
cargo clippy --all-targets --all-features -- -D warnings
cargo test
# optional coverage
cargo llvm-cov --lib --no-default-features --locked --lcov --output-path lcov.info

---

Last updated: July 29, 2026 Updated by: Grok Build: Grok 4.5 Package tip reference: 37c5a21 (main)