build-and-test.yml

name: evm-signer-kms

on:
  push:
    branches:
      - master
      - feat/**
      - fix/**
      - chore/**
      - test/**
      - ci/**
    tags:
      - v[0-9]+.[0-9]+.[0-9]+

  pull_request:
    branches:
      - master

permissions:
  id-token: write
  contents: read

jobs:
  run-tests:
    name: Execute tests and measure coverage
    runs-on: ubuntu-latest
    env:
      LCOV_OUT: test-coverage.lcov
      KMS_KEY_ID: ${{ secrets.KMS_KEY_ID }}
    steps:
      - name: Checkout codebase
        uses: actions/checkout@v4

      - name: Install llvm-cov for code coverage
        uses: taiki-e/install-action@cargo-llvm-cov

      - name: Assume AWS role
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-region: ${{ secrets.AWS_REGION }}
          role-to-assume: ${{ secrets.AWS_KMS_IAM_ROLE }}
          role-session-name: ${{ vars.AWS_STS_SESSION_NAME}}
          mask-aws-account-id: true

      - name: Run unit and integration tests
        env:
          LLVM_COV_ARGS: --lcov --output-path ${{ env.LCOV_OUT }}
        run: |
          make fetch-public-key
          make test-coverage

      - name: Run doc tests
        run: make doc-test

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v4
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: ./${{ env.LCOV_OUT }}
          fail_ci_if_error: true

  build-x86-gnu:
    name: Build for x86_64-unknown-linux-gnu
    runs-on: ubuntu-latest
    steps:
      - name: Checkout codebase
        uses: actions/checkout@v4

      - name: Build for x86_64-unknown-linux-gnu
        run: make build

  build-x86-musl:
    name: Build for x86_64-unknown-linux-musl
    env:
      TOOL_CHAIN : x86_64-unknown-linux-musl
    runs-on: ubuntu-latest
    steps:
      - name: Checkout codebase
        uses: actions/checkout@v4

      - name: Install musl toolchain
        run: |
          sudo apt install musl-tools
          rustup target add --toolchain stable ${{ env.TOOL_CHAIN }}

      - name: Build for x86_64-unknown-linux-musl
        run: make build