Skip to content

Commit

Permalink
Purge Cargo.lock files from Mariner vendor dir (#6908)
Browse files Browse the repository at this point in the history
Cargo.lock files present in the vendor directory will cause Component Governance to incorrectly scan those dependencies. Remove these files to prevent this.
  • Loading branch information
gordonwang0 authored Feb 13, 2023
1 parent a7221fe commit e11cd92
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions edgelet/build/linux/package-mariner.sh
Original file line number Diff line number Diff line change
Expand Up @@ -103,6 +103,7 @@ cargo vendor vendor
# Purge Cargo.lock files from dependencies. These files are not necessary and will cause
# Component Governance to incorrectly scan them for issues.
find "$CARGO_HOME/registry/src/" -name "Cargo.lock" -exec echo "Deleting {}" \; -exec rm {} \;
find "${BUILD_REPOSITORY_LOCALPATH}/vendor/" -name "Cargo.lock" -exec echo "Deleting {}" \; -exec rm {} \;

# Configure Cargo to use vendored the deps
mkdir .cargo
Expand Down

0 comments on commit e11cd92

Please sign in to comment.