ci(nix): add rust audit capabilities

realeinherjar · Oct 19, 2023 · d716439 · d716439
1 parent 4d4d171
commit d716439
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 23 deletions.
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
diff --git a/.github/workflows/cont_integration.yml b/.github/workflows/cont_integration.yml
@@ -36,7 +36,11 @@ jobs:
         run: nix build -L .#ci.fmt --keep-failed
       - name: Clippy
         run: nix build -L .#ci.clippy --keep-failed
-      - name: Test '--all-features' latest Rust
+      # Audit
+      - name: Audit
+        run: nix build -L .#ci.audit --keep-failed
+      # Tests: latest
+      - name: Test workspace all-features latest
         run: nix build -L .#ci.latest.all --keep-failed
       - name: Test '--no-default-features' latest Rust
         run: nix build -L .#ci.latest.noDefault --keep-failed

diff --git a/flake.nix b/flake.nix
@@ -226,9 +226,9 @@
           #   cargoCheckExtraArgs = "-p bdk_esplora --no-default-features --features bitcoin/no-std,miniscript/no-std,bdk_chain/hashbrown,async";
           # });
           # Audit dependencies
-          # audit = craneLib.cargoAudit (commonArgs // {
-          #   inherit advisory-db;
-          # });
+          audit = craneLib.cargoAudit (commonArgs // {
+            inherit advisory-db;
+          });
         };
 
         packages = {
@@ -247,6 +247,7 @@
           ci = {
             clippy = checks.clippy;
             fmt = checks.fmt;
+            audit = checks.audit;
             latest = {
               all = checks.latestAll;
               noDefault = checks.latestNoDefault;
@@ -295,6 +296,7 @@
             checks = {
               clippy = checks.clippy;
               fmt = checks.fmt;
+              audit = checks.audit;
               default = checks.MSRV;
               all = checks.MSRVAll;
               noDefault = checks.MSRVNoDefault;
@@ -318,6 +320,7 @@
             checks = {
               clippy = checks.clippy;
               fmt = checks.fmt;
+              audit = checks.audit;
               default = checks.MSRV;
               all = checks.MSRVAll;
               noDefault = checks.MSRVNoDefault;