gabe /presentato-mf

name: clippy
# Lints gate master: every warning clippy or rustc raises fails the run.
# The same command every Rust repository on the forge runs, over every
# target, against the committed Cargo.lock (the crate in code/).
on:
  push:
    branches: [master]
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

# A newer push supersedes this run: on a branch or PR the run in
# progress is cancelled; on master it finishes, and only a run still
# waiting is replaced.
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}

jobs:
  clippy:
    runs-on: self-hosted
    steps:
      - uses: actions/checkout@v4

      # The toolchain dependency-updates.yml resolves code/Cargo.lock with
      # (1.92.0). Installed directly, since this runner sets ImageOS to
      # "selfhosted" over anything a workflow says.
      - name: Rust
        run: |
          curl -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain 1.92.0 -c clippy
          echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"

      - name: Run clippy
        working-directory: code
        run: cargo clippy --workspace --all-targets --locked -- -D warnings