Harden live Iroh integration paths

This commit is contained in:
Eric Wendland 2026-05-29 15:27:45 +02:00
commit 0fdf5d0be7
6 changed files with 256 additions and 144 deletions

View file

@ -626,11 +626,11 @@ GitHub Actions workflows live under `.github/workflows/`:
- `ci.yml` runs formatting, clippy, docs, `cargo check`, and workspace tests on
Linux, macOS, and Windows. Cross-platform test jobs set
`GETH_TEST_SKIP_IROH=1` so deterministic unit and integration coverage can be
required while Iroh-heavy daemon-to-daemon tests continue to mature.
- `ci.yml` also has a visible Ubuntu Iroh integration smoke job for the full
network-heavy paths. It is marked `continue-on-error` until the local Iroh
tests are reliable enough to make required.
`GETH_TEST_SKIP_IROH=1` so deterministic unit and integration coverage stays
stable across host networking differences.
- `ci.yml` also runs a required Ubuntu Iroh integration smoke job for the live
daemon-to-daemon paths, including peer control, sync, native CAS/KV/pubsub,
pipe forwarding, SSH proxy handshakes, and overlay ALPN authorization.
- `security.yml` runs RustSec `cargo audit` on pushes, pull requests, manual
dispatch, and a weekly schedule.
- `codeql.yml` builds the Rust workspace for GitHub CodeQL analysis.