Skip to content

Add cargo audit + cargo deny to contracts/ CI pipeline #136

Description

@snowrugar-beep
  • Problem Statement. ci.yml builds, lints, and tests but does
    not flag CVEs in crates.
  • Why it matters. Faster CVE detection, less churn.
  • Expected Outcome. Add a contracts-audit job running
    cargo audit and cargo deny check.
  • Acceptance Criteria.
    1. CI fails on HIGH/CRITICAL advisories.
    2. deny.toml committed with allow-list.
  • Files / Modules. .github/workflows/ci.yml,
    contracts/deny.toml.
  • Dependencies. cargo-audit, cargo-deny.
  • Difficulty. Easy.
  • Effort. 0.5 day.
  • Labels. security, ci, contracts, good first issue.

Frontend UX & Accessibility

Metadata

Metadata

Labels

GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26ciImported from docs/ISSUES_100.md (label "ci").contractsImported from docs/ISSUES_100.md (label "contracts").good first issueGood for newcomerssecurity

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions