Bump EmbarkStudios/cargo-deny-action from 1.4.0 to 1.6.3 #152
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Audits dependencies with cargo-deny | |
name: deps | |
permissions: | |
contents: read | |
on: | |
pull_request: | |
paths: | |
- Cargo.lock | |
- deny.toml | |
- .github/workflows/deps.yml | |
env: | |
CARGO_INCREMENTAL: 0 | |
CARGO_NET_RETRY: 10 | |
RUST_BACKTRACE: short | |
RUSTUP_MAX_RETRIES: 10 | |
jobs: | |
# Check for security advisories. | |
# | |
# Failures are not fatal, since issues are opened in the linkerd2 repo via rustsecbot. | |
advisories: | |
timeout-minutes: 10 | |
runs-on: ubuntu-latest | |
continue-on-error: true | |
steps: | |
- uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 | |
- uses: EmbarkStudios/cargo-deny-action@3f4a782664881cf5725d0ffd23969fcce89fd868 | |
with: | |
command: check advisories | |
# Audit licenses, unreleased crates, and unexpected duplicate versions. | |
bans: | |
timeout-minutes: 10 | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 | |
- uses: EmbarkStudios/cargo-deny-action@3f4a782664881cf5725d0ffd23969fcce89fd868 | |
with: | |
command: check bans licenses sources |