Enable cargo audit
#208
Merged
Enable cargo audit
#208
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
flavio
force-pushed
the
enable-cargo-audit-gh-action
branch
from
fd23728
to
3e13a55
Compare
|
I've forced push the commit to change its subject, I hope that will make the |
flavio
force-pushed
the
enable-cargo-audit-gh-action
branch
from
3e13a55
to
186a950
Compare
This commit defines a new GitHub Action running `cargo audit`. The action is triggered in two circumstances: * On a daily basis, this is used to detect new advisory that impact the project. * On PRs that affect `Cargo.toml` or `Cargo.lock`. The GitHub Action will create new issues whenever a new vulnerability is found. Signed-off-by: Flavio Castelli <fcastelli@suse.com>
flavio
force-pushed
the
enable-cargo-audit-gh-action
branch
from
186a950
to
2d42f81
Compare
saschagrunert
approved these changes
Sep 6, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This commit defines two new GitHub Actions, both running
cargo audit.One runs the command on a daily basis, this is used to detect new advisory that impact the project.
The other, runs the
cargo auditcommand on PR that affectCargo.tomlorCargo.lock.The GitHub Action will create new issues whenever a new vulnerability is found.