ci: run the full source quality gate on pull requests

2026-10-29 20:47:18 -06:00 · 2026-10-15 04:19:48 +02:00
parent 05955c08b4
commit 381559abb1
4 changed files with 228 additions and 0 deletions
@@ -0,0 +1,102 @@
+# General source coverage; platform packaging retains its own scoped workflows.
+name: CI
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review]
+  push:
+    branches: [main]
+  workflow_dispatch:
+permissions:
+  contents: read
+concurrency:
+  group: source-pr-ci-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+env:
+  CARGO_TERM_COLOR: always
+  CARGO_BUILD_JOBS: "2"
+  CARGO_INCREMENTAL: "0"
+  RUST_BACKTRACE: "1"
+  RUST_TEST_THREADS: "2"
+  # Passing GPU tests must expose adapter/skip evidence instead of hiding it in captured output.
+  RUST_TEST_NOCAPTURE: "1"
+  WGPU_BACKEND: vulkan
+  EFFECTCRAFT_REQUIRE_GPU: "1"
+jobs:
+  source-pr-ci:
+    name: Source PR quality gate (Linux)
+    runs-on: ubuntu-24.04
+    # Provisional cold-build bound for this new full-workspace layout; recalibrate after hosted runs.
+    timeout-minutes: 150
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Record event and tested merge/head identity
+        run: python3 .github/scripts/ci_report.py record
+
+      - name: Prepare the disposable hosted runner
+        timeout-minutes: 5
+        run: |
+          df -h /
+          sudo rm -rf /usr/local/lib/android /usr/share/dotnet /opt/ghc /usr/local/.ghcup /opt/hostedtoolcache/CodeQL
+          mkdir -p "$RUNNER_TEMP/xdg"
+          chmod 700 "$RUNNER_TEMP/xdg"
+          echo "XDG_RUNTIME_DIR=$RUNNER_TEMP/xdg" >> "$GITHUB_ENV"
+          df -h /
+      - name: Install native test and software Vulkan dependencies
+        timeout-minutes: 10
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            cmake pkg-config libasound2-dev libxkbcommon-dev libwayland-dev libx11-dev \
+            libxcursor-dev libxrandr-dev libxi-dev libgl1-mesa-dev libgtk-3-dev \
+            libfontconfig1-dev libfreetype6-dev libvulkan1 mesa-vulkan-drivers vulkan-tools ffmpeg
+      - uses: dtolnay/rust-toolchain@686976e191b89faba57d3206551f0f330d8cb249 # stable
+        with:
+          components: clippy, rustfmt
+          targets: wasm32-unknown-unknown
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
+        with:
+          key: source-pr-ci-linux
+          save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+          cache-on-failure: true
+      - name: Test coverage reporting
+        run: python3 -m unittest discover -s .github/scripts -p 'test_*.py' -v
+      - name: Require and identify the Vulkan software adapter
+        id: adapter
+        # Run the CPU quality gates even if the adapter probe fails; the final report still fails.
+        continue-on-error: true
+        timeout-minutes: 2
+        run: |
+          icd=$(find /usr/share/vulkan/icd.d -maxdepth 1 -name 'lvp_icd*.json' -print -quit)
+          if [ -z "$icd" ]; then
+            echo "::error::Lavapipe ICD missing; GPU comparisons cannot be accepted"
+            exit 1
+          fi
+          export VK_DRIVER_FILES="$icd" VK_ICD_FILENAMES="$icd"
+          echo "VK_DRIVER_FILES=$icd" >> "$GITHUB_ENV"
+          echo "VK_ICD_FILENAMES=$icd" >> "$GITHUB_ENV"
+          vulkaninfo --summary 2>&1 | tee "$RUNNER_TEMP/vulkan-adapter.log"
+      - name: Full repository quality gate
+        id: quality
+
+        run: cargo xtask ci 2>&1 | tee "$RUNNER_TEMP/quality-gate.log"
+      - name: Report executed tests, adapter availability and skips
+        if: ${{ always() && !cancelled() }}
+        env:
+          ADAPTER_OUTCOME: ${{ steps.adapter.outcome }}
+          QUALITY_OUTCOME: ${{ steps.quality.outcome }}
+        run: python3 .github/scripts/ci_report.py
+      - name: Preserve source identity and full CI evidence
+        if: ${{ always() && !cancelled() }}
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: source-pr-ci-evidence
+          retention-days: 7
+          path: |
+            ${{ runner.temp }}/source-identity.json
+            ${{ runner.temp }}/vulkan-adapter.log
+            ${{ runner.temp }}/quality-gate.log