44 lines
1.0 KiB
YAML
44 lines
1.0 KiB
YAML
name: deps
|
|
|
|
on:
|
|
push:
|
|
branches: [master]
|
|
paths: [Cargo.lock]
|
|
pull_request:
|
|
branches: [master]
|
|
paths: [Cargo.lock]
|
|
|
|
env:
|
|
RUSTFLAGS: -D warnings
|
|
CARGO_TERM_COLOR: always
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: dtolnay/rust-toolchain@nightly
|
|
- run: cargo install --locked cargo-audit
|
|
- run: cargo audit
|
|
|
|
deny:
|
|
name: deny (${{ matrix.checks }})
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
checks:
|
|
- advisories
|
|
- bans licenses sources
|
|
|
|
continue-on-error: ${{ matrix.checks == 'advisories' }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: EmbarkStudios/cargo-deny-action@v1
|
|
with:
|
|
command: check ${{ matrix.checks }}
|