# Generated by ore workflow generate — layer: ci-exhaustive
# Source: .ontology/workflow.ncl
# Do not edit manually — regenerate with: ore workflow generate --layer ci-exhaustive

when:
  event: [push, tag, manual]
  branch: main

steps:
  deny-all:
    image: rust:latest
    commands:
      - cargo install cargo-deny --locked
      - cargo deny check

  geiger:
    image: rust:latest
    commands:
      - cargo install cargo-geiger --locked
      - cargo geiger --all-features --all-targets

  build-release-musl-x86:
    image: rust:latest
    commands:
      - cargo install cross --locked
      - cross build --target x86_64-unknown-linux-musl --release

  build-sbom:
    image: rust:latest
    commands:
      - cargo install cargo-sbom --locked
      - cargo sbom