Add basic CI workflow

Author: djc

.github/workflows/ci.yml

@@ -0,0 +1,47 @@
+name: CI
+
+on:
+  push:
+    branches: ['main']
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        rust: [stable, beta]
+        exclude:
+          - os: macos-latest
+            rust: beta
+          - os: windows-latest
+            rust: beta
+
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@master
+        with:
+          toolchain: ${{ matrix.rust }}
+      - run: cargo test --locked
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+      - run: cargo fmt --all -- --check
+      - run: cargo clippy --all-targets --all-features -- -D warnings
+
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v5
+    - uses: EmbarkStudios/cargo-deny-action@v2

Cargo.toml

@@ -2,6 +2,7 @@
 name = "wireplex"
 version = "0.1.0"
 edition = "2024"
+license = "Apache-2.0 OR MIT"
 
 [dependencies]
 boringtun = "0.6"

deny.toml

@@ -0,0 +1,17 @@
+[advisories]
+ignore = [
+    "RUSTSEC-2024-0344", # timing variability in curve25519-dalek
+    "RUSTSEC-2025-0009", # ring 0.16 QUIC header protection may panic
+    "RUSTSEC-2025-0010", # ring 0.16 is unmaintained
+]
+
+[licenses]
+allow = ["BSD-2-Clause", "BSD-3-Clause", "ISC", "MIT", "OpenSSL", "Unicode-3.0"]
+
+[[licenses.clarify]]
+name = "ring"
+version = "0.16.20"
+expression = "MIT AND ISC AND OpenSSL"
+license-files = [
+    { path = "LICENSE", hash = 0xbd0eed23 }
+]