security

heliannuuthus · Sep 6, 2023 · eb8be14 · eb8be14
1 parent 16f5d06
commit eb8be14
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 11 deletions.
diff --git a/.github/workflows/call-rust-build.yml b/.github/workflows/call-rust-build.yml
@@ -27,7 +27,7 @@ jobs:
         with:
           name: registry
       - name: build
-        run: cargo build --release
+        run: cargo auditable build --release
       - name: test
         run: cargo test --release --verbose
       - id: environments

diff --git a/.github/workflows/call-rust-lint.yml b/.github/workflows/call-rust-lint.yml
@@ -20,24 +20,19 @@ on:
         description: "Rust clippy enable"
 
 jobs:
-  lint:
+  setup:
     runs-on: ubuntu-latest
     defaults:
       run:
         working-directory: ${{ inputs.workdir }}
     steps:
-      - uses: actions/checkout@v3
       - name: update
         run: |
           rustup default ${{ inputs.toolchain }} 
           rustup update 
           rustup component add rustfmt 
           rustup component add clippy
-      - name: fmt
-        run: cargo fmt -- --check --color always
-      - name: clippy
-        if: ${{ inputs.clippy }}
-        run: cargo clippy --all-targets --all-features -- -D warnings
+          cargo install cargo-auditable cargo-audit
       - name: upload registry
         uses: actions/upload-artifact@v3
         with:
@@ -49,13 +44,27 @@ jobs:
             ~/.cargo/git/db/
             target/
 
+  lint:
+    needs: setup
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ${{ inputs.workdir }}
+    steps:
+      - uses: actions/checkout@v3
+      - name: fmt
+        run: cargo fmt -- --check --color always
+      - name: clippy
+        if: ${{ inputs.clippy }}
+        run: cargo clippy --all-targets --all-features -- -D warnings
+
   security:
+    needs: setup
     runs-on: ubuntu-latest
     defaults:
       run:
         working-directory: ${{ inputs.workdir }}
     steps:
       - uses: actions/checkout@v3
-      - uses: actions-rs/audit-check@v1
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+      - name: scan
+        run: cargo audit