fix: address security audit findings (aisafe round 3) #51

	name: Pull Request Checks

	on:
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	rust:
	name: Rust (Format, Lint, Test)
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: src
	env:
	JWT_SECRET: test_secret_for_ci
	steps:
	- uses: actions/checkout@v4

	- name: Install Rust toolchain
	uses: dtolnay/rust-toolchain@stable
	with:
	components: rustfmt, clippy

	- name: Cache cargo registry
	uses: actions/cache@v4
	with:
	path: \|
	~/.cargo/registry
	~/.cargo/git
	src/target
	key: ${{ runner.os }}-cargo-${{ hashFiles('src/Cargo.lock') }}
	restore-keys: \|
	${{ runner.os }}-cargo-

	- name: Check formatting
	run: cargo fmt -- --check

	- name: Clippy lints
	run: cargo clippy -- -D warnings

	- name: Run tests
	run: cargo test

	frontend:
	name: Frontend (Lint, Type Check)
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: frontend
	steps:
	- uses: actions/checkout@v4

	- name: Setup Bun
	uses: oven-sh/setup-bun@v2

	- name: Install dependencies
	run: bun install

	- name: Lint
	run: bun run lint

	- name: Type check
	run: bun run tsc --noEmit

	docker:
	name: Docker Build
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Build Docker image
	uses: docker/build-push-action@v5
	with:
	context: .
	push: false
	tags: requestrepo:test
	cache-from: type=gha
	cache-to: type=gha,mode=max

Navigation Menu