CI and Quality

CI and Quality

Generated with Grok Build: Grok 4.5 · xAI Imagine (/imagine)

GitHub Actions — ci.yml

Triggers: push/PR to main, daily cron.

Job	Content
validate	fmt, clippy -D warnings, build, test, clean-tree guard, llvm-cov → Codecov (if token)
msrv	Same checks on Rust 1.87

Concurrency cancels in-progress PR runs. Checkout SHA-pinned; persist-credentials: false.

Docker — docker-build.yml

Buildx image for PR/main; push to ghcr.io on main (:main + commit SHA tags). Image runs build+test (library crate, no deploy binary).

Release — release.yml

On v* tags or dispatch: verify fmt/clippy/build/test release, then create GitHub Release.

Security — security.yml

Job	Notes
RustSec audit-check	Always
Snyk SCA	When SNYK_TOKEN / SNYK_ENABLED; CycloneDX SBOM
Snyk Code SAST	Same opt-in

Local bar

cargo fmt --check
cargo clippy --all-targets --all-features -- -D warnings
cargo test --all-features
docker build -t engram-parser .

Related

• MSRV
• Getting Started

---

Last updated: July 29, 2026 Updated by: Grok Build: Grok 4.5 Package tip reference: 07a5558 (main)