From 3ee0a99aa3583fc4c1f1aed56ea5f5df7a41ba7a Mon Sep 17 00:00:00 2001 From: "Mat R." <1577341+Ancient123@users.noreply.github.com> Date: Wed, 30 Oct 2024 09:04:24 -0600 Subject: [PATCH] Turn audit check back on (#2235) --- .github/workflows/audit.yml | 14 +++----------- 1 file changed, 3 insertions(+), 11 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 99803f0756..537e935667 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -21,15 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - - # See https://github.com/rustsec/audit-check for docs - # TODO: re-enable if https://github.com/rustsec/audit-check/pull/20 is merged - # - uses: rustsec/audit-check@v1 - # with: - # token: ${{ secrets.GITHUB_TOKEN }} - # Currently the rustsec/audit-check action regenerates the Cargo.lock - # file. Our binaries are built using the committed lock file. - # Re-generating the lock file can hide vulnerabilities. We therefore run - # cargo audit directly which respects our lock file. - - run: cargo audit + - uses: rustsec/audit-check@v2 + with: + token: ${{ secrets.GITHUB_TOKEN }}