Skip to content

Commit

Permalink
Merge pull request #141 from Kijewski/pr-deny
Browse files Browse the repository at this point in the history
ci: update checks
  • Loading branch information
astraw authored Sep 24, 2024
2 parents 665d2c8 + 355c7af commit 6d52bbe
Show file tree
Hide file tree
Showing 2 changed files with 26 additions and 11 deletions.
33 changes: 22 additions & 11 deletions .github/workflows/rust.yml
Original file line number Diff line number Diff line change
Expand Up @@ -80,9 +80,6 @@ jobs:
strategy:
fail-fast: false
matrix:
versions:
- ""
- "-Zminimal-versions"
toolchain:
- stable
- nightly
Expand All @@ -102,10 +99,6 @@ jobs:
uses: taiki-e/install-action@v2
with:
tool: wasm-pack
- name: Update lockfile
run: cargo generate-lockfile ${{ matrix.versions }}
env:
RUSTC_BOOTSTRAP: 1
- run: wasm-pack test --node

build-cross:
Expand Down Expand Up @@ -265,10 +258,7 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Audit
uses: rustsec/[email protected]
with:
token: ${{ secrets.GITHUB_TOKEN }}
- uses: EmbarkStudios/cargo-deny-action@v2

fallback:
runs-on: ubuntu-latest
Expand Down Expand Up @@ -386,3 +376,24 @@ jobs:
run: cargo r --manifest-path=api_gen/Cargo.toml
- name: Diff generated Rust code
run: test -z "$(git status --porcelain)" || (echo "::error::Generated files are different, please regenerate with cargo run --manifest-path=api_gen/Cargo.toml!"; git status; false)

typos:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: crate-ci/typos@master

devskim:
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- uses: actions/checkout@v4
- name: Run DevSkim scanner
uses: microsoft/DevSkim-Action@v1
- name: Upload DevSkim scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: devskim-results.sarif
4 changes: 4 additions & 0 deletions deny.toml
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
[licenses]
version = 2
allow = ["Apache-2.0", "MIT", "Unicode-DFS-2016"]
private = { ignore = true }

0 comments on commit 6d52bbe

Please sign in to comment.