-
Notifications
You must be signed in to change notification settings - Fork 83
74 lines (65 loc) · 1.76 KB
/
audit.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
name: Audit
on:
push:
branches:
- master
pull_request:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
env:
# When getting Rust dependencies, retry on network error:
CARGO_NET_RETRY: 10
# Use the local .curlrc
CURL_HOME: .
jobs:
build_matrix:
runs-on: ubuntu-latest
outputs:
matrix: ${{ steps.set-matrix.outputs.matrix }}
steps:
- uses: actions/checkout@v3
- id: set-matrix
run: echo "matrix=$(scripts/workflows/audit-matrix.py)" >> $GITHUB_OUTPUT
test:
name: audit
runs-on: ${{ matrix.os }}
needs: [ build_matrix ]
strategy:
matrix: ${{fromJson(needs.build_matrix.outputs.matrix)}}
steps:
- uses: actions/checkout@v3
with:
path: sdk
- uses: actions/checkout@v3
with:
repository: 'RustSec/advisory-db'
path: advisory-db
ref: ${{ matrix.advisory-db-rev }}
- uses: actions/cache@v3
with:
path: |
~/.cargo/registry
~/.cargo/git
target
key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
- name: Install Rust
run: |
rustup update ${{ matrix.rust }} --no-self-update
rustup default ${{ matrix.rust }}
cargo install --force --version ${{ matrix.cargo-audit }} cargo-audit --locked
- name: Audit
run: |
cd sdk
cargo audit --no-fetch --db "${GITHUB_WORKSPACE}"/advisory-db
env:
RUST_BACKTRACE: 1
aggregate:
name: audit:required
if: ${{ always() }}
needs: test
runs-on: ubuntu-latest
steps:
- name: check step result directly
if: ${{ needs.test.result != 'success' }}
run: exit 1