aboutsummaryrefslogtreecommitdiff
path: root/.github/workflows/audit.yaml
diff options
context:
space:
mode:
authorChristopher Evans <cwevans@wise.st>2025-09-12 04:01:57 -0700
committerHenrik Tjäder <henrik@tjaders.com>2025-09-17 18:58:58 +0000
commitfbefb66b9ec11c71e1fee5a1be01db6066762fc9 (patch)
treef024212a92ae7ef17f05bae83fae7ef8e1082ebd /.github/workflows/audit.yaml
parent8bcd2489296e6ed6b098dc872bf12a61e1ef8f22 (diff)
ci: Audit-check: create Cargo.lock before audit-check
Allow on demand action checks use latest actions/checkout --- https://github.com/rtic-rs/rtic/pull/1080 switched to using rustsec/audit-check but didn't setup the Cargo.lock file. This action has been failing for three months. https://github.com/rtic-rs/rtic/actions/workflows/audit.yaml --- https://github.com/rustsec/audit-check/pull/39 describes how a missing Cargo.lock will be missing in library crates.
Diffstat (limited to '.github/workflows/audit.yaml')
-rw-r--r--.github/workflows/audit.yaml4
1 files changed, 3 insertions, 1 deletions
diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
index 18a1075..9b8fc7f 100644
--- a/.github/workflows/audit.yaml
+++ b/.github/workflows/audit.yaml
@@ -2,11 +2,13 @@ name: Security audit
on:
schedule:
- cron: '0 0 * * *'
+ workflow_dispatch:
jobs:
security_audit:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
+ - run: cargo generate-lockfile # create Cargo.lock
- uses: rustsec/audit-check@v2.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}