Merge pull request #95 from oscarosk/fix-zizmor-security-lints #103

	name: CI

	on: [push, pull_request]

	permissions:
	contents: read

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	ci:
	name: CI
	runs-on: ubuntu-latest
	steps:

	- name: Checkout the source code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	with:
	fetch-depth: 1
	persist-credentials: false

	- name: Install Rust
	run: rustup update stable && rustup default stable

	- name: Check formatting
	run: cargo fmt -- --check

	- name: Run the test suite
	run: cargo test

	- name: Build the Docker container
	run: docker build -t rust-log-analyzer .

	- name: Deploy to production
	uses: rust-lang/simpleinfra/github-actions/upload-docker-image@4da88c824d96c01628fbad1e1b97cd24e08216c4 # master
	with:
	image: rust-log-analyzer
	repository: rust-log-analyzer
	region: us-west-1
	redeploy_ecs_cluster: rust-ecs-prod
	redeploy_ecs_service: rust-log-analyzer
	aws_access_key_id: "${{ secrets.AWS_ACCESS_KEY_ID }}"
	aws_secret_access_key: "${{ secrets.AWS_SECRET_ACCESS_KEY }}"
	if: github.ref == 'refs/heads/master'

	zizmor:
	name: Zizmor
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- name: Checkout the source code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	with:
	persist-credentials: false

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
	with:
	advanced-security: false
	config: zizmor.yml

Provide feedback