mirror of
https://github.com/rustsec/advisory-db.git
synced 2025-12-27 01:54:07 -05:00
d7e08cf6cb
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](08c6903cd8...1af3b93b68)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
51 lines
1.7 KiB
YAML
51 lines
1.7 KiB
YAML
name: Synchronize IDs
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
# daily run on default "main" branch
|
|
- cron: "30 1 * * *"
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
sync-ids:
|
|
name: Synchronize IDs
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write # for create-pull-request
|
|
pull-requests: write # for create-pull-request
|
|
steps:
|
|
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Cache cargo bin
|
|
id: admin-cache
|
|
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
|
|
with:
|
|
path: ~/.cargo/bin
|
|
key: rustsec-admin-4f949d61d9ed2ef59f8c4448b5ab96e6eef0d6ed
|
|
|
|
- name: Install rustsec-admin
|
|
if: steps.admin-cache.outputs.cache-hit != 'true'
|
|
run: cargo install --git https://github.com/rustsec/rustsec rustsec-admin --rev 4f949d61d9ed2ef59f8c4448b5ab96e6eef0d6ed
|
|
|
|
- name: Synchronize IDs
|
|
id: sync_ids
|
|
run: |
|
|
mkdir -p /tmp/osv
|
|
curl --silent --output /tmp/osv/advisories.zip https://osv-vulnerabilities.storage.googleapis.com/crates.io/all.zip
|
|
unzip -d /tmp/osv -q /tmp/osv/advisories.zip
|
|
rustsec-admin sync --osv /tmp/osv/ .
|
|
message="Synchronize IDs ($(date +%F))"
|
|
echo "commit_message=${message}" >> $GITHUB_OUTPUT
|
|
|
|
- name: Create pull request
|
|
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
commit-message: ${{ steps.sync_ids.outputs.commit_message }}
|
|
title: ${{ steps.sync_ids.outputs.commit_message }}
|
|
branch: sync-ids
|