Use cargo-deny ci action

Signed-off-by: Eval EXEC <execvy@gmail.com>
nervosnetwork · Mar 1, 2024 · e050c68 · e050c68
1 parent eef7829
commit e050c68
Showing 1 changed file with 36 additions and 34 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -18,57 +18,59 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ ubuntu-latest, macos-11, windows-latest]
+        os: [ ubuntu-latest, macos-11, windows-latest ]
     steps:
-    - uses: actions/checkout@v3
-    - if: matrix.os == 'windows-latest'
-      name: Windows Dependencies
-      shell: pwsh
-      run: |
-        iex "& {$(irm get.scoop.sh)} -RunAsAdmin"
-        scoop install mingw git
-    - name: UnitTest
-      shell: pwsh
-      run: |
-        make test
-        git diff
+      - uses: actions/checkout@v3
+      - if: matrix.os == 'windows-latest'
+        name: Windows Dependencies
+        shell: pwsh
+        run: |
+          iex "& {$(irm get.scoop.sh)} -RunAsAdmin"
+          scoop install mingw git
+      - name: UnitTest
+        shell: pwsh
+        run: |
+          make test
+          git diff
 
   integration-test:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-11]
+        os: [ ubuntu-latest, macos-11 ]
     steps:
-    - uses: actions/checkout@v2
-    - name: Integration_Test
-      run: make integration
+      - uses: actions/checkout@v2
+      - name: Integration_Test
+        run: make integration
 
   linters:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-11]
+        os: [ ubuntu-latest, macos-11 ]
     steps:
-    - uses: actions/checkout@v2
-    - name: Linters
-      run: |
-        cargo fmt --version || rustup component add rustfmt
-        cargo clippy --version || rustup component add clippy
-        make fmt
-        make clippy
-        git diff --exit-code Cargo.lock
+      - uses: actions/checkout@v2
+      - name: Linters
+        run: |
+          cargo fmt --version || rustup component add rustfmt
+          cargo clippy --version || rustup component add clippy
+          make fmt
+          make clippy
+          git diff --exit-code Cargo.lock
 
   security-audit:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        checks:
+          - --hide-inclusion-graph --show-stats advisories sources
+          - --hide-inclusion-graph --show-stats bans
+          - --hide-inclusion-graph --show-stats licenses
     steps:
-    - uses: actions/checkout@v2
-    - name: Security Audit & Licenses
-      run: |
-        rustup toolchain install stable --profile minimal
-        cargo deny --version || cargo install cargo-deny --locked
-        make security-audit
-        make check-crates
-        make check-licenses
+      - uses: actions/checkout@v3
+      - uses: EmbarkStudios/cargo-deny-action@v1
+        with:
+          command: check ${{ matrix.checks }}
 
   ci-success:
     name: ci