Periodic audits #124
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Periodic audits | |
on: | |
schedule: | |
- cron: "0 0 * * *" | |
push: | |
paths: | |
- .github/workflows/audit.yml | |
jobs: | |
security: | |
name: Verify that all our deps are secure | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v1 | |
- name: Install rust | |
id: rust-install | |
uses: dtolnay/rust-toolchain@stable | |
- name: Cache | |
uses: actions/cache@v3 | |
with: | |
path: | | |
~/.cargo | |
target/ | |
key: ${{ runner.os }}-${{ steps.rust-install.outputs.cachekey }}-cargo | |
- name: Install cargo-audit | |
run: cargo install cargo-audit | |
- name: Audit | |
run: | | |
cargo audit -D warnings \ | |
--ignore RUSTSEC-2021-0145 # Transitive through criterion; awaiting new release with https://github.com/bheisler/criterion.rs/pull/628 | |
nightly_compat: | |
name: See if future Rust versions will break anything | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v1 | |
with: | |
submodules: true | |
- name: Install rust | |
id: rust-install | |
uses: dtolnay/rust-toolchain@nightly | |
with: | |
components: clippy | |
# Normally this would be where we use actions/cache, but since nightly | |
# is likely to change on every run, it doesn't seem worth it | |
- name: Test | |
env: | |
RUSTFLAGS: -D warnings | |
run: | | |
cargo +${{steps.rust-install.outputs.name}} test | |
cargo +${{steps.rust-install.outputs.name}} test --all-features | |
- name: Clippy | |
run: | | |
cargo +${{steps.rust-install.outputs.name}} clippy -- -D warnings | |
cargo +${{steps.rust-install.outputs.name}} clippy --all-features -- -D warnings |