Skip to content

ci: commit Cargo.lock so cargo vet can run #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
27Bslash6 merged 3 commits into from
May 21, 2026
Merged

ci: commit Cargo.lock so cargo vet can run #32

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
8886a4d
ci: commit Cargo.lock so cargo vet can run
27Bslash6 May 21, 2026
ea65ca0
ci: drop --locked on cargo install cargo-fuzz
27Bslash6 May 21, 2026
c4f5bab
ci: run Cargo Vet on pull_request, not just schedule
27Bslash6 May 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 9 additions & 3 deletions .github/workflows/security.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -109,7 +109,10 @@ jobs:
${{ runner.os }}-cargo-

- name: Install cargo-fuzz
run: cargo install cargo-fuzz --locked
# NOTE: --locked omitted: cargo-fuzz 0.13.1's published Cargo.lock pins
# rustix 0.36.5, which uses unstable `rustc_attrs` cfg gates that newer
# nightly rustc rejects. Let cargo resolve fresh deps.
run: cargo install cargo-fuzz

- name: Run quick fuzz (corpus only)
run: |
Expand Down Expand Up @@ -164,7 +167,10 @@ jobs:
${{ runner.os }}-cargo-

- name: Install cargo-fuzz
run: cargo install cargo-fuzz --locked
# NOTE: --locked omitted: cargo-fuzz 0.13.1's published Cargo.lock pins
# rustix 0.36.5, which uses unstable `rustc_attrs` cfg gates that newer
# nightly rustc rejects. Let cargo resolve fresh deps.
run: cargo install cargo-fuzz

- name: Run deep fuzz (30 minutes per target)
run: |
Expand Down Expand Up @@ -220,7 +226,7 @@ jobs:
cargo-vet:
name: Cargo Vet (Supply Chain)
runs-on: cachekit
if: github.event_name == 'schedule'
if: github.event_name == 'schedule' || github.event_name == 'pull_request'
steps:
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
Expand Down
1 change: 0 additions & 1 deletion .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,5 @@
# Rust build artifacts
/target/
Cargo.lock

# Generated files (keep .gitkeep but ignore generated header)
include/cachekit.h
Expand Down
Loading
Loading