From 664b01a1e21bce34cde46e5c840ad6a85666bfbb Mon Sep 17 00:00:00 2001 From: artichoke-ci Date: Wed, 21 Dec 2022 10:23:03 -0800 Subject: [PATCH] chore: Update `.github/workflows/audit.yaml` in `artichoke/cactusref` Managed by Terraform. ## Contents ``` --- name: Audit "on": push: branches: - trunk pull_request: branches: - trunk schedule: - cron: "0 0 * * TUE" jobs: ruby: name: Audit Ruby Dependencies runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v3 - name: Install Ruby toolchain uses: ruby/setup-ruby@v1 with: ruby-version: ".ruby-version" bundler-cache: true - name: bundler-audit run: bundle exec bundle-audit check --update rust: name: Audit Rust Dependencies runs-on: ubuntu-latest strategy: matrix: checks: - advisories - bans licenses sources # Prevent sudden announcement of a new advisory from failing ci: continue-on-error: ${{ matrix.checks == 'advisories' }} steps: - name: Checkout repository uses: actions/checkout@v3 - name: Install Rust toolchain uses: artichoke/setup-rust/audit@v1 - name: Generate Cargo.lock run: | if [[ ! -f "Cargo.lock" ]]; then cargo generate-lockfile --verbose fi - uses: EmbarkStudios/cargo-deny-action@v1 with: arguments: --locked --all-features command: check ${{ matrix.checks }} command-arguments: --show-stats ``` --- .github/workflows/audit.yaml | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-) diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml index 91f3534d8..11a3d1199 100644 --- a/.github/workflows/audit.yaml +++ b/.github/workflows/audit.yaml @@ -44,27 +44,12 @@ jobs: uses: actions/checkout@v3 - name: Install Rust toolchain - run: | - echo "::group::rustup toolchain install" - rustup toolchain install stable --profile minimal - echo "::endgroup::" - echo "::group::set default toolchain" - rustup default stable - echo "::endgroup::" - echo "::group::rustup version" - rustup -Vv - echo "::endgroup::" - echo "::group::rustc version" - rustc -Vv - echo "::endgroup::" - echo "::group::cargo version" - cargo version --verbose - echo "::endgroup::" + uses: artichoke/setup-rust/audit@v1 - name: Generate Cargo.lock run: | if [[ ! -f "Cargo.lock" ]]; then - cargo +stable generate-lockfile --verbose + cargo generate-lockfile --verbose fi - uses: EmbarkStudios/cargo-deny-action@v1