Skip to content

CI: replace cargo-audit with cargo-deny#19

Merged
vbp1 merged 1 commit intomainfrom
ci/use-cargo-deny
Dec 25, 2025
Merged

CI: replace cargo-audit with cargo-deny#19
vbp1 merged 1 commit intomainfrom
ci/use-cargo-deny

Conversation

@vbp1
Copy link
Copy Markdown
Owner

@vbp1 vbp1 commented Dec 25, 2025

This replaces the CI cargo-audit step with cargo-deny advisories checks to avoid breakages from upstream advisory-db format changes (e.g. CVSS 4.0 parsing).

Changes:

  • Switch .github/workflows/ci.yml from cargo audit to EmbarkStudios/cargo-deny-action (advisories only)
  • Add deny.toml and ignore the known RUSTSEC-2021-0154 (fuser)
  • Ignore local .cargo-tools/ helper binaries

@vbp1 vbp1 merged commit cfbfdad into main Dec 25, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant