diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml new file mode 100644 index 000000000..4687eee59 --- /dev/null +++ b/.github/workflows/cargo-audit.yml @@ -0,0 +1,42 @@ +name: cargo audit +on: + pull_request: + types: + - labeled + - unlabeled + - synchronize +concurrency: + group: cargo-audit-${{ github.ref }} + cancel-in-progress: true + +jobs: + cargo-audit: + name: cargo audit + runs-on: SubtensorCI + if: ${{ !contains(github.event.pull_request.labels.*.name, 'skip-cargo-audit') }} + steps: + - name: Check-out repositoroy under $GITHUB_WORKSPACE + uses: actions/checkout@v4 + + - name: Install dependencies + run: | + sudo apt-get update && + sudo apt-get install -y clang curl libssl-dev llvm libudev-dev protobuf-compiler + + - name: Install Rust Stable + uses: actions-rs/toolchain@v1.0.6 + with: + toolchain: stable + components: rustfmt, clippy + profile: minimal + + - name: Utilize Shared Rust Cache + uses: Swatinem/rust-cache@v2.2.1 + with: + key: ubuntu-latest-${{ env.RUST_BIN_DIR }} + + - name: Install cargo-audit + run: cargo install cargo-audit + + - name: cargo audit + run: cargo audit --ignore RUSTSEC-2024-0336 # rustls issue; wait for upstream to resolve this diff --git a/.github/workflows/check-rust.yml b/.github/workflows/check-rust.yml index b6a627314..80d543163 100644 --- a/.github/workflows/check-rust.yml +++ b/.github/workflows/check-rust.yml @@ -208,37 +208,6 @@ jobs: - name: cargo clippy --workspace --all-targets --all-features -- -D warnings run: cargo clippy --workspace --all-targets --all-features -- -D warnings - # runs cargo audit - cargo-audit: - name: cargo audit - runs-on: SubtensorCI - if: ${{ github.event_name != 'push' && !contains(github.event.pull_request.labels.*.name, 'skip-cargo-audit') }} - steps: - - name: Check-out repositoroy under $GITHUB_WORKSPACE - uses: actions/checkout@v4 - - - name: Install dependencies - run: | - sudo apt-get update && - sudo apt-get install -y clang curl libssl-dev llvm libudev-dev protobuf-compiler - - - name: Install Rust Stable - uses: actions-rs/toolchain@v1.0.6 - with: - toolchain: stable - components: rustfmt, clippy - profile: minimal - - - name: Utilize Shared Rust Cache - uses: Swatinem/rust-cache@v2.2.1 - with: - key: ubuntu-latest-${{ env.RUST_BIN_DIR }} - - - name: Install cargo-audit - run: cargo install cargo-audit - - - name: cargo audit - run: cargo audit --ignore RUSTSEC-2024-0336 # rustls issue; wait for upstream to resolve this # runs cargo test --workspace cargo-test: