diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml deleted file mode 100644 index 6143cca822..0000000000 --- a/.github/workflows/audit.yml +++ /dev/null @@ -1,19 +0,0 @@ -name: Audit - -on: - push: - paths: - - '**/Cargo.toml' - - '**/Cargo.lock' - schedule: - - cron: '0 0 * * 0' # Once per week - -jobs: - - security_audit: - runs-on: ubuntu-20.04 - steps: - - uses: actions/checkout@v2 - - uses: actions-rs/audit-check@v1 - with: - token: ${{ secrets.GITHUB_TOKEN }} \ No newline at end of file diff --git a/.github/workflows/cont_integration.yml b/.github/workflows/cont_integration.yml index 0d5be19a9e..3ecfe6ac95 100644 --- a/.github/workflows/cont_integration.yml +++ b/.github/workflows/cont_integration.yml @@ -36,7 +36,11 @@ jobs: run: nix build -L .#ci.fmt --keep-failed - name: Clippy run: nix build -L .#ci.clippy --keep-failed - - name: Test '--all-features' latest Rust + # Audit + - name: Audit + run: nix build -L .#ci.audit --keep-failed + # Tests: latest + - name: Test workspace all-features latest run: nix build -L .#ci.latest.all --keep-failed - name: Test '--no-default-features' latest Rust run: nix build -L .#ci.latest.noDefault --keep-failed diff --git a/flake.nix b/flake.nix index f1e09a74f0..7911cea681 100644 --- a/flake.nix +++ b/flake.nix @@ -226,9 +226,9 @@ # cargoCheckExtraArgs = "-p bdk_esplora --no-default-features --features bitcoin/no-std,miniscript/no-std,bdk_chain/hashbrown,async"; # }); # Audit dependencies - # audit = craneLib.cargoAudit (commonArgs // { - # inherit advisory-db; - # }); + audit = craneLib.cargoAudit (commonArgs // { + inherit advisory-db; + }); }; packages = { @@ -247,6 +247,7 @@ ci = { clippy = checks.clippy; fmt = checks.fmt; + audit = checks.audit; latest = { all = checks.latestAll; noDefault = checks.latestNoDefault; @@ -295,6 +296,7 @@ checks = { clippy = checks.clippy; fmt = checks.fmt; + audit = checks.audit; default = checks.MSRV; all = checks.MSRVAll; noDefault = checks.MSRVNoDefault; @@ -318,6 +320,7 @@ checks = { clippy = checks.clippy; fmt = checks.fmt; + audit = checks.audit; default = checks.MSRV; all = checks.MSRVAll; noDefault = checks.MSRVNoDefault;