Dev

.dockerignore

@@ -0,0 +1,32 @@
+# Build artifacts
+target/
+**/*.rs.bk
+
+# IDE files
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# Git
+.git/
+.gitignore
+
+# Documentation (except needed docs)
+*.md
+!README.md
+
+# Docker files
+Dockerfile
+.dockerignore
+docker-compose.yml
+
+# Temporary files
+*.tmp
+*.log
+
+# Test results
+results/
+
+# CI/CD
+.github/

.github/workflows/README.md

@@ -0,0 +1,88 @@
+# GitHub Actions Workflows
+
+## Overview
+
+This repository has two CI/CD pipelines:
+
+### 1. Main Branch Pipeline (`main-build-cicd.yaml`)
+- **Triggers on:** Push to `main` branch, PRs to main
+- **Builds:** Two Docker images (standard + Chainguard)
+- **Features:** Lint, test, SBOM generation, multi-platform support
+- **Tags:** `latest` (main branch)
+
+### 2. Dev Branch Pipeline (`dev-build-cicd.yaml`)
+- **Triggers on:** Push to `dev` branch, PRs to dev
+- **Builds:** Single Docker image (amd64 only for speed)
+- **Features:** Fast builds with caching, artifact attestation
+- **Tags:** `dev`, `dev-<sha>`
+
+---
+
+## Setup
+
+### Docker Hub Credentials
+
+1. **Create Docker Hub Access Token**
+   - Go to https://hub.docker.com/settings/security
+   - Click "New Access Token"
+   - Name: `github-actions`
+   - Permissions: Read, Write, Delete
+   - Copy the token
+
+2. **Add GitHub Secrets**
+   - Go to your repo: Settings → Secrets and variables → Actions
+   - Add two secrets:
+     - `DOCKERHUB_USERNAME`: Your Docker Hub username
+     - `DOCKERHUB_TOKEN`: The access token from step 1
+
+### Pipeline Details
+
+#### Main Branch (`main-build-cicd.yaml`)
+**Triggers:**
+- Push to `main` branch
+- Pull requests to `main`
+
+**Process:**
+1. Lint (rustfmt & clippy)
+2. Run test suite
+3. Build two Docker images:
+   - Standard Ubuntu-based image
+   - Minimal Chainguard static image
+4. Generate SBOMs for both images
+5. Push to Docker Hub
+
+**Images:**
+- `cbaugus/rust_loadtest:latest`
+- `cbaugus/rust_loadtest:latest-Chainguard`
+
+#### Dev Branch (`dev-build-cicd.yaml`)
+**Triggers:**
+- Push to `dev` branch
+- Pull requests to `dev`
+- Manual trigger via GitHub UI
+
+**Process:**
+1. Build Docker image (amd64 only)
+2. Push to Docker Hub with caching
+
+**Images:**
+- `cbaugus/rust_loadtest:dev`
+- `cbaugus/rust_loadtest:dev-<git-sha>`
+
+**Platform:**
+- `linux/amd64` (x86_64 only - optimized for faster dev builds)
+
+### Usage
+
+After the workflow runs, pull the image:
+
+```bash
+# Dev branch
+docker pull cbaugus/rust-loadtest:dev
+
+# Main/latest
+docker pull cbaugus/rust-loadtest:latest
+
+# Specific version
+docker pull cbaugus/rust-loadtest:0.2.0
+```

.github/workflows/dev-build-cicd.yaml

@@ -0,0 +1,54 @@
+name: Dev Branch - Docker Build
+
+on:
+  push:
+    branches:
+      - dev
+  pull_request:
+    branches:
+      - dev
+  workflow_dispatch:
+
+env:
+  REGISTRY: docker.io
+  IMAGE_NAME: cbaugus/rust_loadtest
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE_NAME }}
+          tags: |
+            # Tag with dev for dev branch
+            type=raw,value=dev
+            # Add SHA for traceability
+            type=sha,prefix=dev-
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64

.github/workflows/dev-cicd.yaml

@@ -0,0 +1,137 @@
+name: Dev CI/CD
+
+on:
+  push:
+    branches: [dev]
+  pull_request:
+    branches: [dev]
+  workflow_dispatch:
+
+env:
+  REGISTRY: docker.io
+  IMAGE_NAME: cbaugus/rust_loadtest
+
+jobs:
+  # Lint job - runs first to catch formatting/style issues early
+  lint:
+    name: Lint (rustfmt & clippy)
+    runs-on: ubuntu-latest
+    timeout-minutes: 10  # Prevent runaway linting
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+
+      - name: Cache cargo registry
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry/index
+            ~/.cargo/registry/cache
+            ~/.cargo/git/db
+          key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-registry-
+
+      - name: Cache cargo build
+        uses: actions/cache@v4
+        with:
+          path: target
+          key: ${{ runner.os }}-cargo-build-lint-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-build-lint-
+
+      - name: Check formatting
+        run: cargo fmt --all --check
+
+      - name: Run clippy
+        run: cargo clippy --all-targets --all-features -- -D warnings
+
+  # Test job - runs after lint passes with strict timeouts
+  test:
+    name: Test Suite
+    runs-on: ubuntu-latest
+    needs: lint
+    timeout-minutes: 15  # ⚠️ CRITICAL: Prevent tests from running forever
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache cargo registry
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry/index
+            ~/.cargo/registry/cache
+            ~/.cargo/git/db
+          key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-registry-
+
+      - name: Cache cargo build
+        uses: actions/cache@v4
+        with:
+          path: target
+          key: ${{ runner.os }}-cargo-build-test-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-build-test-
+
+      - name: Run unit tests
+        run: |
+          # Run tests with timeout per test to catch hanging tests
+          # --test-threads=1 runs tests serially to avoid conflicts with global state
+          cargo test --lib --all-features --verbose -- --test-threads=1
+        timeout-minutes: 10
+
+      - name: Run integration tests
+        run: |
+          # Integration tests may take longer, but still need timeout
+          cargo test --test '*' --all-features --verbose -- --test-threads=1
+        timeout-minutes: 10
+
+  # Build job - builds Docker image after tests pass
+  build-docker:
+    name: Build Docker Image
+    runs-on: ubuntu-latest
+    needs: test
+    if: github.event_name == 'push'  # Only build on push, not PR
+    timeout-minutes: 20
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE_NAME }}
+          tags: |
+            # Tag with dev for dev branch
+            type=raw,value=dev
+            # Add SHA for traceability
+            type=sha,prefix=dev-
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          platforms: linux/amd64

.github/workflows/build-cicd.yaml → .github/workflows/main-build-cicd.yaml

@@ -2,7 +2,7 @@ name: CI/CD
 
 on:
   push:
-    branches: ["**"]
+    branches: [main]
   pull_request:
     branches: [main]