mirror of
https://github.com/rtic-rs/rtic.git
synced 2025-12-16 21:05:35 +01:00
ci: Audit-check: create Cargo.lock before audit-check
Allow on demand action checks use latest actions/checkout --- https://github.com/rtic-rs/rtic/pull/1080 switched to using rustsec/audit-check but didn't setup the Cargo.lock file. This action has been failing for three months. https://github.com/rtic-rs/rtic/actions/workflows/audit.yaml --- https://github.com/rustsec/audit-check/pull/39 describes how a missing Cargo.lock will be missing in library crates.
This commit is contained in:
parent
8bcd248929
commit
fbefb66b9e
1 changed files with 3 additions and 1 deletions
4
.github/workflows/audit.yaml
vendored
4
.github/workflows/audit.yaml
vendored
|
|
@ -2,11 +2,13 @@ name: Security audit
|
||||||
on:
|
on:
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '0 0 * * *'
|
- cron: '0 0 * * *'
|
||||||
|
workflow_dispatch:
|
||||||
jobs:
|
jobs:
|
||||||
security_audit:
|
security_audit:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v5
|
||||||
|
- run: cargo generate-lockfile # create Cargo.lock
|
||||||
- uses: rustsec/audit-check@v2.0.0
|
- uses: rustsec/audit-check@v2.0.0
|
||||||
with:
|
with:
|
||||||
token: ${{ secrets.GITHUB_TOKEN }}
|
token: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue