chore(ci): add linting, formatting check, and auditing

.github/workflows/action.yml

@@ -40,9 +40,21 @@ jobs:
           authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
           skipPush: ${{ github.event_name == 'pull_request' }}
 
+      - name: Format Check
+        shell: bash -c "nix develop --no-pure-eval --accept-flake-config --command {0}"
+        run: just format-check
+
+      - name: Audit
+        shell: bash -c "nix develop --no-pure-eval --accept-flake-config --command {0}"
+        run: just audit
+
+      - name: Lint
+        shell: bash -c "nix develop --no-pure-eval --accept-flake-config --command {0}"
+        run: just lint-report
+
       - name: Coverage
-        run: |
+        shell: bash -c "nix develop --no-pure-eval --accept-flake-config --command {0}"
-            nix develop --no-pure-eval --accept-flake-config --command just coverage
+        run: just coverage-ci
 
       - name: Sonar analysis
         uses: SonarSource/sonarqube-scan-action@v6

justfile

@@ -24,6 +24,10 @@ build-release:
 lint:
 	cargo clippy --all-targets
 
+lint-report:
+	mkdir -p coverage
+	cargo clippy --all-targets --message-format=json > coverage/clippy.json
+
 release-build:
 	cargo build --release