ci.yml

name: Cargo Build & Test

on:
  pull_request:

env:
  CARGO_TERM_COLOR: always

jobs:
  get-branch-name:
    runs-on: ubuntu-latest
    steps:
      - name: Get branch name
        shell: bash
        # The workflow is triggered by pull_request so we use `GITHUB_BASE_REF`
        run: echo "branch_name=${GITHUB_BASE_REF}" >> $GITHUB_OUTPUT
        id: get_branch_name

    outputs:
      branch_name: ${{ steps.get_branch_name.outputs.branch_name }}

  build_and_test_java_hello_world:
    name: java-hello-world
    runs-on: ubuntu-latest
    strategy:
      matrix:
        toolchain:
          - stable
    steps:
      - uses: actions/setup-java@v3
        with:
          distribution: 'corretto'
          java-version: '17'
      - name: Checkout cedar-examples
        uses: actions/checkout@v3
      - name: Checkout cedar-java
        uses: actions/checkout@v3
        with:
          repository: cedar-policy/cedar-java
          ref: release/2.3.x # Java example currently only builds for 2.3.3
          path: ./cedar-java-hello-world/cedar-java
      - name: rustup
        run: rustup update ${{ matrix.toolchain }} && rustup default ${{ matrix.toolchain }}
      - name: cargo build CedarJavaFFI
        working-directory: ./cedar-java-hello-world/cedar-java/CedarJavaFFI
        run: cargo build
      - name: Build cedar-java-hello-world
        working-directory: ./cedar-java-hello-world
        run: bash config.sh && ./gradlew build
      - name: Run cedar-java-hello-world
        working-directory: ./cedar-java-hello-world
        run: ./gradlew test

  run_example_use_cases:
    name: run_example_use_cases
    needs: get-branch-name
    uses: ./.github/workflows/run_example_use_cases_reusable.yml
    with:
      cedar_policy_ref: "refs/heads/main" # use the latest commit on main
      cedar_examples_ref: "${{ github.head_ref }}" # use the current PR's commit

  build_rust_hello_world:
    name: rust_hello_world
    needs: get-branch-name
    uses: ./.github/workflows/build_rust_hello_world_reusable.yml
    with:
      cedar_policy_ref: "refs/heads/main" # use the latest commit on main
      cedar_examples_ref: "${{ github.head_ref }}" # use the current PR's commit

  build_tiny_todo:
    name: tinytodo
    needs: get-branch-name
    uses: ./.github/workflows/build_tiny_todo_reusable.yml
    with:
      cedar_policy_ref: "refs/heads/main" # use the latest commit on main
      cedar_examples_ref: "${{ github.head_ref }}" # use the current PR's commit

  build_and_run_oopsla_benchmarks:
    name: OOPSLA2024 benchmarks
    runs-on: ubuntu-latest
    steps:
      - name: Checkout cedar-examples
        uses: actions/checkout@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Build Docker image
        uses: docker/build-push-action@v5
        with:
          push: false
          context: oopsla2024-benchmarks
          file: oopsla2024-benchmarks/Dockerfile
          tags: cedar-benchmarks:latest
          load: true
          cache-from: type=gha
          cache-to: type=gha,mode=max
      - name: Run benchmarks inside Docker container
        uses: addnab/docker-run-action@v3
        with:
          image: cedar-benchmarks:latest
          # run a small run, that completes fast, but will still make sure things work properly
          run: cargo run --release -- bench --app gdrive,github,tiny-todo,gdrive-templates,github-templates --engine cedar,open-fga,rego,cedar-opt --num-hierarchies 3 --num-requests 3 --num-entities 1,2,3