tq

Appearance

Local Workflows ​

Core contributor commands for day-to-day work.

Workspace loop ​

  • cargo check --workspace --all-targets --locked
  • cargo run -p tq-cli --locked -- check --help

Use cargo check as the fast compile, type, trait, and borrow-check loop before running stricter gates.

Quality gates ​

  • cargo dev check routine --repo-root .
  • cargo dev check all --repo-root .
  • cargo dev check --profile full all --repo-root .

cargo dev check routine runs formatting, clippy, tests, actionlint with ShellCheck integration, and automation policy. cargo dev check all adds generated-doc sync and release-policy validation. cargo dev check --profile full all adds the local release artifact build. The release build validates the source distribution plus a wheel for the current host platform; the full publishable artifact matrix is validated in CI.

Combined local check ​

  • cargo dev check routine --repo-root .

Security and dependency audit ​

  • cargo audit -D warnings
  • cargo deny check
  • cargo update --dry-run

Secret scanning and commit policy remain part of the standard workflow through gitleaks and commitizen, with GitHub secret scanning enabled on the repository.

These checks are only the baseline. Before adding or upgrading external dependencies, follow the broader Security standards guidance and the dependency review bar in Supply-chain security standards.

Pre-commit hooks ​

The language-specific pre-commit hooks are Rust-native:

  • cargo fmt --all on pre-commit
  • cargo dev check routine on pre-push

The pre-push hook is the same routine gate CI runs, so a push that passes hooks does not fail CI on gate checks.