Audit

Improvements #267

	name: Audit

	on:
	push:
	branches: ["main"]
	pull_request:

	permissions: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref_name }}
	cancel-in-progress: true

	env:
	CARGO_INCREMENTAL: 0
	CARGO_TERM_COLOR: always
	CLICOLOR_FORCE: ""

	jobs:
	rust-sec:
	name: RustSec - ${{ matrix.workspace.name }}

	runs-on: ubuntu-latest

	timeout-minutes: 20

	strategy:
	fail-fast: false
	matrix:
	workspace:
	- { name: Client, path: client }
	- { name: Host, path: host }

	defaults:
	run:
	working-directory: ${{ matrix.workspace.path }}

	steps:
	- name: Checkout
	uses: actions/checkout@v7
	with:
	persist-credentials: false
	- name: Install `cargo audit`
	uses: taiki-e/install-action@v2
	with:
	tool: cargo-audit
	- name: Run `cargo audit`
	run: cargo audit

	npm:
	name: NPM Audit - `${{ matrix.package.name }}`

	runs-on: ubuntu-slim

	timeout-minutes: 20

	strategy:
	fail-fast: false
	matrix:
	package:
	- { name: js-bindgen-cli-lib, path: host/cli-lib/src/js }
	- { name: js-bindgen-runner, path: host/runner/src/js }

	defaults:
	run:
	working-directory: ${{ matrix.package.path }}

	steps:
	- name: Checkout
	uses: actions/checkout@v7
	with:
	persist-credentials: false
	- name: Generate Lockfile
	run: npm install --package-lock-only --no-audit --no-fund
	- name: Run `npm audit`
	run: npm audit

Navigation Menu