Skip to content

Operations and verification

Before every push

There are no build or test checks in CI. The tests below are the only test gate, so they run locally before every push:

Install build dependencies (Debian and Ubuntu):

sudo apt install --no-install-recommends build-essential pkg-config libgtk-4-dev libadwaita-1-dev libvte-2.91-gtk4-dev libgtksourceview-5-dev openssh-client

Test:

cd LinuxApp && cargo test --workspace

Run the app:

cd LinuxApp && cargo run

In CI

  • CodeQL (GitHub's default setup) analyzes the code on every pull request and on main. Errors and serious security alerts block merging.
  • The documentation is built strictly with Zensical when docs/ or zensical.toml changes in a pull request.
  • The release waits for the checks in .github/release-required-checks; see Releases.

Security rules

  • Private keys, tokens and passwords never go into the repo, logs or test data.
  • Values that reach a shell are quoted and preferably passed through env:.
  • A dependency is updated in the manifest that actually owns it.