diff options
| author | Linus Färnstrand <linus@mullvad.net> | 2024-01-25 12:46:46 +0100 |
|---|---|---|
| committer | Linus Färnstrand <linus@mullvad.net> | 2024-01-25 12:46:46 +0100 |
| commit | c92bff747f09110c21bc1ceb47151f3cb65ea6cf (patch) | |
| tree | e1311000e240e1b3b6aee9f3f0a06418a221a770 | |
| parent | b0c5a8fd0e07e77481f61388a0c4df6ccca76ce3 (diff) | |
| parent | fd3979b3738966398135138a81eaaeae3a818f60 (diff) | |
| download | mullvadvpn-c92bff747f09110c21bc1ceb47151f3cb65ea6cf.tar.xz mullvadvpn-c92bff747f09110c21bc1ceb47151f3cb65ea6cf.zip | |
Merge branch 'run-cargo-audit-on-testframework-des-569'
| -rw-r--r-- | .github/workflows/cargo-audit.yml | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml index 0210facfea..da351348d3 100644 --- a/.github/workflows/cargo-audit.yml +++ b/.github/workflows/cargo-audit.yml @@ -5,6 +5,7 @@ on: paths: - .github/workflows/cargo-audit.yml - Cargo.lock + - test/Cargo.lock schedule: # At 06:20 UTC every day. Will create an issue if a CVE is found. - cron: '20 6 * * *' @@ -18,7 +19,19 @@ jobs: - name: Checkout repository uses: actions/checkout@v3 - - uses: actions-rust-lang/audit@v1 + - uses: actions-rust-lang/audit@v1.1.11 name: Audit Rust Dependencies with: + file: Cargo.lock denyWarnings: true + + - uses: actions-rust-lang/audit@v1.1.11 + name: Audit testrunner Rust Dependencies + with: + file: test/Cargo.lock + denyWarnings: true + # Ignored audit issues. This list should be kept short, and effort should be + # put into removing items from the list. + # RUSTSEC-2023-0057,RUSTSEC-2023-0058 - Unsoundness in `inventory`. + # RUSTSEC-2020-0168 - `mach` is unmaintained. Can be fixed by upgrading `serialport`. + ignore: RUSTSEC-2023-0057,RUSTSEC-2023-0058,RUSTSEC-2020-0168 |