Public Access
Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
e9159ac5f7 | ||
|
|
49cdbfff23 | ||
|
|
27d7cd3d63 | ||
|
|
bc91a32ed8 | ||
|
|
139ab94e83 | ||
|
|
71526086eb | ||
|
|
6ef0fcd2dd |
@@ -1,6 +1,7 @@
|
||||
# Rust `audit-check` Action
|
||||
|
||||

|
||||
[](https://gitter.im/actions-rs/community)
|
||||
|
||||
> Security vulnerabilities audit
|
||||
|
||||
@@ -43,27 +44,6 @@ Note that informational advisories are not affecting the check status.
|
||||
|
||||

|
||||
|
||||
#### Granular Permissions
|
||||
|
||||
These are the typically used permissions:
|
||||
|
||||
```yaml
|
||||
name: 'rust-audit-check'
|
||||
github-token:
|
||||
action-input:
|
||||
input: token
|
||||
is-default: false
|
||||
permissions:
|
||||
issues: write
|
||||
issues-reason: to create issues
|
||||
checks: write
|
||||
checks-reason: to create check
|
||||
```
|
||||
|
||||
The action does not raise issues when it is not triggered from a "cron" scheduled workflow.
|
||||
|
||||
When running the action as scheduled it will crate issues but e.g. in PR / push fails the action.
|
||||
|
||||
#### Limitations
|
||||
|
||||
Due to [token permissions](https://help.github.com/en/articles/virtual-environments-for-github-actions#token-permissions),
|
||||
|
||||
Vendored
+1
-1
File diff suppressed because one or more lines are too long
@@ -37,20 +37,6 @@ function makeReport(
|
||||
});
|
||||
break;
|
||||
|
||||
case 'unsound':
|
||||
preparedWarnings.push({
|
||||
advisory: warning.advisory,
|
||||
package: warning.package,
|
||||
});
|
||||
break;
|
||||
|
||||
case 'notice':
|
||||
preparedWarnings.push({
|
||||
advisory: warning.advisory,
|
||||
package: warning.package,
|
||||
});
|
||||
break;
|
||||
|
||||
case 'informational':
|
||||
preparedWarnings.push({
|
||||
advisory: warning.advisory,
|
||||
|
||||
Reference in New Issue
Block a user