jpmschweitzer/settled-reach
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(simulation): add cargo audit to CI/review pipeline (#637)

Browse Source 
Add `make audit` target running `cargo audit` with an advisory ignore for
RUSTSEC-2025-0141 (bincode, tracked by #636). Wire audit into `make pre-pr`
and `make pre-pr-server`. Add conditional cargo audit to the pre-commit hook
(triggers only when Cargo.toml/Cargo.lock are staged).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
jpmschweitzer
2026-03-17 10:40:15 +01:00
co-authored by Claude Opus 4.6
parent aa79dd97e7
commit 18afede4f2
3 changed files with 29 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/audit.toml
+9
View File
@@ -0,0 +1,9 @@
# cargo audit configuration for settled-reach-server.
# Known advisories that are tracked but not yet resolved are listed here.
# New advisories NOT in this list will fail CI.
[advisories]
# RUSTSEC-2025-0141: bincode v1.3.3 is unmaintained.
# Migration to bincode v2 or an alternative is tracked in ticket #636.
# This ignore can be removed once #636 is resolved.
ignore = ["RUSTSEC-2025-0141"]