name: Stream Server CI

on:
  push:
    paths:
      - "veza-stream-server/**"
      - "veza-common/**"
      - ".github/workflows/stream-ci.yml"
  pull_request:
    paths:
      - "veza-stream-server/**"
      - "veza-common/**"
      - ".github/workflows/stream-ci.yml"

jobs:
  test:
    runs-on: ubuntu-latest

    defaults:
      run:
        working-directory: veza-stream-server

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
        with:
          components: clippy

      - name: Lint with clippy
        run: cargo clippy --all-targets -- -D warnings

      - name: Audit dependencies
        uses: actions-rust-lang/audit@v1 # TODO: pin to SHA — no known mapping provided
        with:
          token: ${{ secrets.GITHUB_TOKEN }}

      - name: Run tests
        run: cargo test --all