Skip to content

Merge pull request #217 from artichoke/dependabot/github_actions/gha-… #608

Merge pull request #217 from artichoke/dependabot/github_actions/gha-…

Merge pull request #217 from artichoke/dependabot/github_actions/gha-… #608

Workflow file for this run

---
name: Audit
"on":
push:
branches:
- trunk
pull_request:
branches:
- trunk
schedule:
- cron: "0 0 * * TUE"
jobs:
ruby:
name: Audit Ruby Dependencies
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/[email protected]
- name: Install Ruby toolchain
uses: ruby/setup-ruby@250fcd6a742febb1123a77a841497ccaa8b9e939 # v1.152.0
with:
ruby-version: ".ruby-version"
bundler-cache: true
- name: bundler-audit
run: bundle exec bundle-audit check --update
rust:
name: Audit Rust Dependencies
runs-on: ubuntu-latest
strategy:
matrix:
checks:
- advisories
- bans licenses sources
# Prevent sudden announcement of a new advisory from failing ci:
continue-on-error: ${{ matrix.checks == 'advisories' }}
steps:
- name: Checkout repository
uses: actions/[email protected]
- name: Install Rust toolchain
uses: artichoke/setup-rust/[email protected]
- name: Generate Cargo.lock
run: |
if [[ ! -f "Cargo.lock" ]]; then
cargo generate-lockfile --verbose
fi
- uses: EmbarkStudios/cargo-deny-action@a50c7d5f86370e02fae8472c398f15a36e517bb8 # v1.5.4
with:
arguments: --locked --all-features
command: check ${{ matrix.checks }}
command-arguments: --show-stats