cargo-checkmate

Perform a series of useful checks out of the box. cargo-checkmate ensures your project builds, tests pass, has good format, doesn't have dependencies with known vulnerabilities, and so on.

The philosophy is that you can just run it without configuration on most crates to catch as many issues as possible (with low very low false-positives). The rationale behind not having configuration is that checkmate failures should be the same for all developers (for a given version of cargo-checkmate) regardless of individual developer configurations.

How to use it

``` bash $ cargo install cargo-checkmate ...

$ cd /path/to/your/crate

$ cargo checkmate

running 6 cargo-checkmate phases cargo-checkmate check... ok. cargo-checkmate format... ok. cargo-checkmate build... ok. cargo-checkmate test... ok. cargo-checkmate doc... ok. cargo-checkmate audit... ok.

cargo-checkmate result: ok. 6 passed; 0 failed ```

git hook

If your crate is in a git repo, you can verify each commit follows cargo checkmate checks by running it in a pre-commit git hook. You can install a pre-bundled git hook that does precisely that:

$ cargo checkmate git-hook install cargo-checkmate git-hook installed: ".git/hooks/pre-commit"

Now commits are checked: ``` $ touch foo $ git add foo $ git commit -m 'Demo cargo checkmate git-hook usage.'

cargo checkmate git-hook: Removing prior log directory: ./target/cargo-checkmate/logs

running 6 cargo-checkmate phases cargo-checkmate check... ok. cargo-checkmate format... ok. cargo-checkmate build... ok. cargo-checkmate test... ok. cargo-checkmate doc... ok. cargo-checkmate audit... ok.

cargo-checkmate result: ok. 6 passed; 0 failed [master 6e3230a] Demo cargo checkmate git-hook usage. 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 src/foo ```

If you want to intentionally skip the checks for a commit, git provides the git commit --no-verify flag. If you change your mind, you can likewise uninstall:

$ cargo checkmate git-hook uninstall cargo-checkmate git-hook uninstalled: ".git/hooks/pre-commit"

Both install & install try to be very careful about not clobbering any unrecognized pre-commit hook in case you already have a custom one:

``` $ cargo checkmate git-hook install cargo-checkmate git-hook installed: ".git/hooks/pre-commit"

$ cargo checkmate git-hook install cargo-checkmate git-hook already installed: ".git/hooks/pre-commit"

$ echo 'blah' > .git/hooks/pre-commit

$ cargo checkmate git-hook uninstall cargo-checkmate unrecognized git-hook: ".git/hooks/pre-commit" Error: Custom { kind: Other, error: "Unrecongized git-hook: \".git/hooks/pre-commit\"" }

$ cargo checkmate git-hook install cargo-checkmate unrecognized git-hook: ".git/hooks/pre-commit" Error: Custom { kind: Other, error: "Unrecongized git-hook: \".git/hooks/pre-commit\"" } ```

Logs

Each check phase logs both stdout and stderr into ./target/cargo-checkmate/logs:

$ cat ./target/cargo-checkmate/logs/doc.stderr Documenting cargo-checkmate v0.1.2 (/home/user/hack/cargo-checkmate) Finished dev [unoptimized + debuginfo] target(s) in 1.67s

On each run, any pre-existing logs are first removed, and this fact is reported:

``` $ cargo checkmate Removing prior log directory: ./target/cargo-checkmate/logs

running 6 cargo-checkmate phases cargo-checkmate check... ok. cargo-checkmate format... ok. cargo-checkmate build... ok. cargo-checkmate test... ok. cargo-checkmate doc... ok. cargo-checkmate audit... ok.

cargo-checkmate result: ok. 6 passed; 0 failed

```

Failures

If any phase fails, the stdout/stderr logs are displayed automatically:

``` $ # Introduce a poorly formatted unit test: $ echo '#[test] fn bad_format() {}' >> src/main.rs $ cargo checkmate Removing prior log directory: ./target/cargo-checkmate/logs

running 6 cargo-checkmate phases cargo-checkmate check... ok. cargo-checkmate format... FAILED. cargo-checkmate build... ok. cargo-checkmate test... ok. cargo-checkmate doc... ok. cargo-checkmate audit... ok.

failures:

---- cargo-checkmate format ---- + ./target/cargo-checkmate/logs/format.stdout: | Diff in /home/user/hack/cargo-checkmate/src/main.rs at line 17: | let check = Check::parseargs(std::env::args())?; | check.execute() | } | -#[test] fn badformat() {} | +#[test] | +fn bad_format() {} |

cargo-checkmate result: FAILED. 5 passed; 1 failed ```

Audit Freshness

The cargo audit command always fetches an advisory db which requires network access and latency. As an optimization, cargo-checkmate skips cargo audit if the following conditions are true:

This optimizes the use of cargo-checkmate especially for the git hook assuming a developer is committing many revisions over a couple of hours.