points by esafak 1 day ago | 0 comments
I was thinking "Builds and tests with a fast-moving Rust code base like this must be painful", then I noticed the total absence of tests: https://github.com/anomalyco/rune/commits/dev/
[–] anentropic 1 day ago
[–] QuantumNomad_ 1 day ago
Indeed. But why not run the tests in CI when merging to master?
[–] efficax 1 day ago
Where I work, we've moved CI "left", all tests are run on the developers machine before merging
[–] esafak 1 day ago
You're not shifting left unless you guarantee local tests always run, faithfully to production. That rarely happens. Local testing should be supplementary. We use https://hk.jdx.dev/
[–] efficax 1 day ago
We do ensure this, requiring signed proof, running in containers that would be identical to github runners (more or less). Now, this could be spoofed by an engineer, but we operate in a high trust environment
[–] esafak 1 day ago
This is interesting. Are you using an available product for managing these signatures, or did you write your own?
[–] efficax 1 day ago
we built workflows using swamp https://swamp-club.com/
e.g. https://github.com/anomalyco/rune/tree/dev/crates/rune-kit/t...