Compare commits

...

14 Commits

Author SHA1 Message Date
Jonas Bushart
5c5da92c03 Update cargo-audit to 0.21.0 2024-11-06 22:21:55 +01:00
Jonas Bushart
17d62dc82d Merge pull request #96 from actions-rust-lang/pre-commit-ci-update-config 2024-10-29 00:02:23 +01:00
pre-commit-ci[bot]
733aff2088 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/asottile/pyupgrade: v3.18.0 → v3.19.0](https://github.com/asottile/pyupgrade/compare/v3.18.0...v3.19.0)
- [github.com/pre-commit/mirrors-mypy: v1.12.1 → v1.13.0](https://github.com/pre-commit/mirrors-mypy/compare/v1.12.1...v1.13.0)
2024-10-28 17:41:22 +00:00
Jonas Bushart
95e05e5d8e Merge pull request #95 from actions-rust-lang/pre-commit-ci-update-config 2024-10-21 22:30:53 +02:00
pre-commit-ci[bot]
969643f199 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/pre-commit/mirrors-mypy: v1.11.2 → v1.12.1](https://github.com/pre-commit/mirrors-mypy/compare/v1.11.2...v1.12.1)
2024-10-21 17:36:32 +00:00
Jonas Bushart
7614934373 Merge pull request #94 from actions-rust-lang/pre-commit-ci-update-config
[pre-commit.ci] pre-commit autoupdate
2024-10-15 08:17:37 +02:00
pre-commit-ci[bot]
946808f018 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/psf/black: 24.8.0 → 24.10.0](https://github.com/psf/black/compare/24.8.0...24.10.0)
- [github.com/asottile/pyupgrade: v3.17.0 → v3.18.0](https://github.com/asottile/pyupgrade/compare/v3.17.0...v3.18.0)
- [github.com/python-jsonschema/check-jsonschema: 0.29.3 → 0.29.4](https://github.com/python-jsonschema/check-jsonschema/compare/0.29.3...0.29.4)
2024-10-14 17:40:00 +00:00
Jonas Bushart
1fcfd212ac List dependencies in readme 2024-10-11 19:46:47 +02:00
Jonas Bushart
d26dd44917 Merge pull request #92 from actions-rust-lang/pre-commit-ci-update-config 2024-10-07 20:25:07 +02:00
pre-commit-ci[bot]
645e2942e8 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/pre-commit/pre-commit-hooks: v4.6.0 → v5.0.0](https://github.com/pre-commit/pre-commit-hooks/compare/v4.6.0...v5.0.0)
2024-10-07 18:01:30 +00:00
Jonas Bushart
965b6233a3 Merge pull request #91 from actions-rust-lang/pre-commit-ci-update-config 2024-09-30 19:42:14 +02:00
pre-commit-ci[bot]
9fe902be91 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/pre-commit/mirrors-mypy: v1.11.1 → v1.11.2](https://github.com/pre-commit/mirrors-mypy/compare/v1.11.1...v1.11.2)
- [github.com/python-jsonschema/check-jsonschema: 0.29.1 → 0.29.3](https://github.com/python-jsonschema/check-jsonschema/compare/0.29.1...0.29.3)
2024-09-30 17:34:43 +00:00
Jonas Bushart
94cd57b0d8 Merge pull request #90 from actions-rust-lang/pre-commit-ci-update-config 2024-08-05 20:15:11 +02:00
pre-commit-ci[bot]
5330a4041e [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/psf/black: 24.4.2 → 24.8.0](https://github.com/psf/black/compare/24.4.2...24.8.0)
- [github.com/pre-commit/mirrors-mypy: v1.11.0 → v1.11.1](https://github.com/pre-commit/mirrors-mypy/compare/v1.11.0...v1.11.1)
2024-08-05 17:41:54 +00:00
4 changed files with 23 additions and 7 deletions

View File

@@ -1,10 +1,10 @@
repos:
- repo: https://github.com/psf/black
rev: 24.4.2
rev: 24.10.0
hooks:
- id: black
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v4.6.0
rev: v5.0.0
hooks:
- id: check-ast
- id: check-case-conflict
@@ -20,18 +20,18 @@ repos:
- id: isort
args: ["--profile=black"]
- repo: https://github.com/asottile/pyupgrade
rev: v3.17.0
rev: v3.19.0
hooks:
- id: pyupgrade
args: ["--py37-plus"]
- repo: https://github.com/pre-commit/mirrors-mypy
rev: v1.11.0
rev: v1.13.0
hooks:
- id: mypy
additional_dependencies:
- types-requests
- repo: https://github.com/python-jsonschema/check-jsonschema
rev: 0.29.1
rev: 0.29.4
hooks:
- id: check-dependabot
- id: check-github-actions

View File

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
## [1.2.2] - 2024-11-06
* Update `cargo-audit` to 0.21.0
## [1.2.1] - 2024-07-31
* Temporarily remove `--locked` from the install instructions again, since cargo-audit relies on an old version of `time` that is incompatible with Rust 1.80.

View File

@@ -58,6 +58,18 @@ Setting `denyWarnings` to true will also enable these warnings, but each warning
| `createIssues` | Create/Update issues for each found vulnerability. By default only on `main` or `master` branch. | `github.ref == 'refs/heads/master' \|\| github.ref == 'refs/heads/main'` |
| `workingDirectory` | Run `cargo audit` from the given working directory | |
## Dependencies
The action works best on the GitHub-hosted runners, but can work on self-hosted ones too, provided the necessary dependencies are available.
PRs to add support for more environments are welcome.
* bash
* Python 3.9+
* requests
* Rust stable
* cargo
* use node actions
## License
The scripts and documentation in this project are released under the [MIT License].

View File

@@ -45,12 +45,12 @@ runs:
${{ steps.cargo-home.outputs.cargohome }}/bin/cargo-audit*
${{ steps.cargo-home.outputs.cargohome }}/.crates.toml
${{ steps.cargo-home.outputs.cargohome }}/.crates2.json
key: cargo-audit-v0.20.0
key: cargo-audit-v0.21.0
- name: Install cargo-audit
if: steps.cache.outputs.cache-hit != 'true'
# Update both this version number and the cache key
run: cargo install cargo-audit --vers 0.20.0 --no-default-features
run: cargo install cargo-audit --vers 0.21.0 --no-default-features
shell: bash
- run: |