Merge pull request #21 from 100monkeys-ai/feat/registry-client-resolv… #21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Security | |
| on: | |
| push: | |
| branches: [main] | |
| schedule: | |
| - cron: '0 6 * * 1' | |
| jobs: | |
| audit: | |
| name: Cargo Audit | |
| runs-on: ubuntu-latest | |
| permissions: | |
| checks: write | |
| contents: read | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: rustsec/audit-check@v2 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| # RUSTSEC-2023-0071: rsa Marvin Attack timing sidechannel. | |
| # No fix available. Enters via sqlx-macros-core -> sqlx-mysql which | |
| # sqlx's proc-macro crate pulls unconditionally regardless of features. | |
| # Forge never performs RSA operations; rsa is never invoked at runtime. | |
| # Revisit when sqlx gates sqlx-mysql behind a feature flag. | |
| ignore: RUSTSEC-2023-0071 | |
| codeql: | |
| name: CodeQL | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: github/codeql-action/init@v3 | |
| with: | |
| languages: rust | |
| - uses: github/codeql-action/autobuild@v3 | |
| - uses: github/codeql-action/analyze@v3 |