blob: 8120c5daf6ffa4d70f70a69665c6a83acb6a497e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
name: Audit Rust dependencies CI
on:
push:
paths:
- .github/workflows/cargo-audit.yml
- '**/*.rs'
- Cargo.lock
# Check if requested manually from the Actions tab
workflow_dispatch:
jobs:
audit:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v2
- name: Install cargo-audit
uses: actions-rs/install@v0.1.2
with:
crate: cargo-audit
version: latest
- name: Audit
# TEMP: Ignore the time/chrono segfault CVEs since there are no known
# good workarounds, and we want logs etc to be in local time.
run: cargo audit --ignore RUSTSEC-2020-0159 --ignore RUSTSEC-2020-0071
|
