add some workflows for CI and dependabot config

3 files changed, 86 insertions, 0 deletions

diff --git a/src/x509-info/.github/dependabot.yml b/src/x509-info/.github/dependabot.yml
new file mode 100644
index 0000000..d062b44
--- /dev/null
+++ b/src/x509-info/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/src/x509-info/.github/workflows/ci.yml b/src/x509-info/.github/workflows/ci.yml
new file mode 100644
index 0000000..271b774
--- /dev/null
+++ b/src/x509-info/.github/workflows/ci.yml
@@ -0,0 +1,47 @@
+name: CI checks
+
+on: [push, pull_request]
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run tests
+        run: cargo test
+      - name: Verify working directory is clean
+        run: git diff --exit-code
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: cargo fetch
+      - name: Build for target
+        run: cargo build --verbose
+
+  bitrot:
+    name: Bitrot
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check unused code
+        run: cargo check --all-targets --all-features
+
+  clippy:
+    name: Clippy
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check clippy
+        run: cargo clippy
+
+  fmt:
+    name: Rustfmt
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check formatting
+        run: cargo fmt --all -- --check
diff --git a/src/x509-info/.github/workflows/update.yml b/src/x509-info/.github/workflows/update.yml
new file mode 100644
index 0000000..788b88d
--- /dev/null
+++ b/src/x509-info/.github/workflows/update.yml
@@ -0,0 +1,29 @@
+name: 'Update flake.lock'
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '30 5 * * 0'
+
+# you need to grant permissions to create PR:
+# https://github.com/DeterminateSystems/update-flake-lock/issues/75
+jobs:
+  update-flake-lock:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install Nix
+        uses: cachix/install-nix-action@v26
+        with:
+          extra_nix_config: |
+            access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
+      - name: Update flake.lock
+        id: update-flake-lock
+        uses: DeterminateSystems/update-flake-lock@v21
+        with:
+          pr-title: "Update flake.lock"
+          commit-msg: "chore: update flake"
+          pr-assignees: fcuny
+          pr-labels: |
+            dependencies
+            automated