Public Access
Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
e9159ac5f7 | ||
|
|
49cdbfff23 | ||
|
|
27d7cd3d63 | ||
|
|
bc91a32ed8 | ||
|
|
139ab94e83 | ||
|
|
71526086eb | ||
|
|
6ef0fcd2dd |
@@ -1,6 +1,7 @@
|
|||||||
# Rust `audit-check` Action
|
# Rust `audit-check` Action
|
||||||
|
|
||||||

|

|
||||||
|
[](https://gitter.im/actions-rs/community)
|
||||||
|
|
||||||
> Security vulnerabilities audit
|
> Security vulnerabilities audit
|
||||||
|
|
||||||
@@ -43,27 +44,6 @@ Note that informational advisories are not affecting the check status.
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
#### Granular Permissions
|
|
||||||
|
|
||||||
These are the typically used permissions:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
name: 'rust-audit-check'
|
|
||||||
github-token:
|
|
||||||
action-input:
|
|
||||||
input: token
|
|
||||||
is-default: false
|
|
||||||
permissions:
|
|
||||||
issues: write
|
|
||||||
issues-reason: to create issues
|
|
||||||
checks: write
|
|
||||||
checks-reason: to create check
|
|
||||||
```
|
|
||||||
|
|
||||||
The action does not raise issues when it is not triggered from a "cron" scheduled workflow.
|
|
||||||
|
|
||||||
When running the action as scheduled it will crate issues but e.g. in PR / push fails the action.
|
|
||||||
|
|
||||||
#### Limitations
|
#### Limitations
|
||||||
|
|
||||||
Due to [token permissions](https://help.github.com/en/articles/virtual-environments-for-github-actions#token-permissions),
|
Due to [token permissions](https://help.github.com/en/articles/virtual-environments-for-github-actions#token-permissions),
|
||||||
|
|||||||
Vendored
+1
-1
File diff suppressed because one or more lines are too long
@@ -37,20 +37,6 @@ function makeReport(
|
|||||||
});
|
});
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case 'unsound':
|
|
||||||
preparedWarnings.push({
|
|
||||||
advisory: warning.advisory,
|
|
||||||
package: warning.package,
|
|
||||||
});
|
|
||||||
break;
|
|
||||||
|
|
||||||
case 'notice':
|
|
||||||
preparedWarnings.push({
|
|
||||||
advisory: warning.advisory,
|
|
||||||
package: warning.package,
|
|
||||||
});
|
|
||||||
break;
|
|
||||||
|
|
||||||
case 'informational':
|
case 'informational':
|
||||||
preparedWarnings.push({
|
preparedWarnings.push({
|
||||||
advisory: warning.advisory,
|
advisory: warning.advisory,
|
||||||
|
|||||||
Reference in New Issue
Block a user