mirror of
https://github.com/openai/codex.git
synced 2026-02-01 22:47:52 +00:00
4ed4c73d6b
- add to ignore current unmaintained advisories (derivative, fxhash, paste) so audits gate new issues only - introduce GitHub Actions workflow to run on push/PR using to install cargo-audit Existing advisories (all "unmaintained"): - https://rustsec.org/advisories/RUSTSEC-2024-0388 - https://rustsec.org/advisories/RUSTSEC-2025-0057 - https://rustsec.org/advisories/RUSTSEC-2024-0436
27 lines
485 B
YAML
27 lines
485 B
YAML
name: Cargo audit
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: codex-rs
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: dtolnay/rust-toolchain@stable
|
|
- name: Install cargo-audit
|
|
uses: taiki-e/install-action@v2
|
|
with:
|
|
tool: cargo-audit
|
|
- name: Run cargo audit
|
|
run: cargo audit --deny warnings
|