diff --git a/.github/settings.yml b/.github/settings.yml index db13a76d..c8049488 100644 --- a/.github/settings.yml +++ b/.github/settings.yml @@ -1,11 +1,11 @@ # Reference: https://github.com/apps/settings repository: - name: tomb + name: banyan-cli default_branch: main private: false - description: Banyan's client, WNFS+CAR encrypted filesystem packer and metadata handler. + description: Command line interface for interacting with the Banyan Filesystem and Platform homepage: https://banyan.computer/ topics: cli, platform @@ -34,6 +34,10 @@ branches: required_status_checks: strict: true contexts: + - "rust / audit" + - "rust / build" + - "rust / format" + - "rust / test" - "cargo-deny (advisories)" - "cargo-deny (bans licenses sources)" diff --git a/.github/workflows/advisories.yml b/.github/workflows/advisories.yml index 952702ab..e3fa6af6 100644 --- a/.github/workflows/advisories.yml +++ b/.github/workflows/advisories.yml @@ -5,9 +5,9 @@ on: - cron: '0 14 * * 1' jobs: cargo-audit: - runs-on: ubuntu-latest + runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: rustsec/audit-check@v1.4.1 with: token: ${{ secrets.GITHUB_TOKEN }} @@ -15,7 +15,7 @@ jobs: cargo-deny: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: EmbarkStudios/cargo-deny-action@v1 with: command: check advisories diff --git a/.github/workflows/audits.yml b/.github/workflows/audits.yml index 5c7bbc9b..6498d7f3 100644 --- a/.github/workflows/audits.yml +++ b/.github/workflows/audits.yml @@ -1,6 +1,4 @@ name: 🛡 Dependency Security & License Audit -on: - - pull_request jobs: cargo-deny: diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index 739dd467..005b9bbe 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -1,7 +1,18 @@ name: rust on: - - pull_request + workflow_call: + inputs: + cache_version: + type: string + default: v1 + cargo_audit_version: + type: string + default: 0.20.0 + cargo_audit_ignores: + type: string + default: '' + description: Comma-delimited list of RUSTSEC CVE identifiers to ignore during audit. env: RUSTC_WRAPPER: sccache