ci.yml

name: CI
on:
  push:

jobs:
  build:
    name: Build UEFI executable
    runs-on: ubuntu-24.04
    steps:
    - uses: actions/checkout@v6

    - name: Setup Rust toolchain
      run: rustup show

    - name: Build UEFI app (release)
      run: make release

    - name: Generate artifact version
      run: |
        echo "VERSIONINFO=$(date -u +'%Y-%m-%d-%H-%M-%S')_$GITHUB_SHA" >> $GITHUB_ENV

    # Upload release first to get fast builds from CI
    - name: Upload UEFI app (release)
      uses: actions/upload-artifact@v6
      with:
        name: inputmodules_release_${{ env.VERSIONINFO }}
        path: target/x86_64-unknown-uefi/release/inputmodules.efi

    - name: Build UEFI app (QEMU)
      run: make qemu

    - name: Install authenticode-tool
      run: |
        cargo install --locked authenticode-tool

    # Print in github actions log that you don't have to manually hash it
    - name: Hash release binary
      run: |
        echo "Filesize in KiB"
        du -k --apparent-size target/x86_64-unknown-uefi/release/inputmodules.efi
        echo "Unsigned SHA256"
        sha256sum target/x86_64-unknown-uefi/release/inputmodules.efi
        echo "SHA256 Authenticode"
        authenticode-tool info target/x86_64-unknown-uefi/release/inputmodules.efi

  lints:
    name: Lints
    runs-on: ubuntu-24.04
    steps:
    - uses: actions/checkout@v6

    - name: Setup Rust toolchain
      run: rustup show

    - name: Run cargo fmt
      run: cargo fmt --all -- --check

    - name: Run cargo clippy
      run: make clippy