Skip to content

Rust - Audit dependencies #3034

Rust - Audit dependencies

Rust - Audit dependencies #3034

Workflow file for this run

---
name: Rust - Audit dependencies
on:
pull_request:
paths:
- .github/workflows/cargo-audit.yml
- Cargo.lock
- test/Cargo.lock
schedule:
# At 06:20 UTC every day. Will create an issue if a CVE is found.
- cron: '20 6 * * *'
workflow_dispatch:
jobs:
audit:
runs-on: ubuntu-latest
permissions:
issues: write
steps:
- name: Checkout repository
uses: actions/checkout@v3
- uses: actions-rust-lang/audit@v1.1.11
name: Audit Rust Dependencies
with:
file: Cargo.lock
denyWarnings: true
# Ignored audit issues. This list should be kept short, and effort should be
# put into removing items from the list.
# RUSTSEC-2023-0079 - KyberSlash in `pqc_kyber`.
ignore: RUSTSEC-2023-0079
- uses: actions-rust-lang/audit@v1.1.11
name: Audit testrunner Rust Dependencies
with:
file: test/Cargo.lock
denyWarnings: true
# Ignored audit issues. This list should be kept short, and effort should be
# put into removing items from the list.
# RUSTSEC-2023-0057,RUSTSEC-2023-0058 - Unsoundness in `inventory`.
ignore: RUSTSEC-2023-0057,RUSTSEC-2023-0058