Merge pull request #1096 from onekey-sec/merge-native

Merge unblob-native

.github/actions/setup-dependencies/action.yml

@@ -3,23 +3,43 @@ inputs:
     description: "Python version to setup"
     required: false
     default: "3.9"
+  install-test-deps:
+    description: "Wether to install 3rd Party dependencies (for tests)"
+    required: false
+    default: "true" # unfortunately boolean variables are not supported
 
 name: "Setup dependencies"
 description: "Install all required dependencies for worflows to run."
 runs:
   using: "composite"
   steps:
-    - name: Install 3rd party dependencies
-      run: sudo unblob/install-deps.sh
+    - if: inputs.install-test-deps == 'true'
+      name: Install 3rd party dependencies
+      run: sudo ./install-deps.sh
+      shell: bash
+
+    - name: Setup sccache # for speeding up Rust builds
+      uses: mozilla-actions/[email protected]
+      with:
+        disable_annotations: true # it is very spammy, but useful for diagnostics
+
+    - name: Enable sccache
+      run: |
+        echo SCCACHE_GHA_ENABLED=true >> $GITHUB_ENV
+        echo RUSTC_WRAPPER=sccache >> $GITHUB_ENV
       shell: bash
 
     - name: Install uv & Python
       uses: astral-sh/setup-uv@v5
       with:
         enable-cache: true
         cache-dependency-glob: "uv.lock"
-        python-version: ${{ matrix.python-version }}
+        python-version: ${{ inputs.python-version }}
 
     - name: Install the project
       run: uv sync
       shell: bash
+
+    - name: Setup pip # some tools need it, and uv virtualenvs doesn't contain it
+      run: uv pip install pip
+      shell: bash

.github/codeql/codeql-config.yml

@@ -4,7 +4,8 @@ queries:
   - uses: security-and-quality
 
 paths:
-  - 'unblob'
+  - 'python'
+  - 'rust'
   - 'tests'
 
 paths-ignore: