CI: run cargo audit

Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 7238111d621d360a13c0709bd7899b1cbb2a8540..8e78cd72ce6679ce62911d041dff40671effb0de 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -50,6 +50,21 @@ maint-checks:
     - debian/update-build-deps --check
     - set +e; env git grep -i 'XX[X]'; test $? = 1
 
+# This can start to generate new warnings as new issues are found.
+# And nearly all of the issues are not a crisis.  Often the are
+# irrelevant, or "unmaintained code".  So make this a warning.
+cargo-audit:
+  stage: test
+  allow_failure: true
+  image: "rust:bookworm"
+  script:
+    - ./test/via-cargo-install-in-ci cargo-audit
+    - cargo audit
+  cache:
+    when: 'always'
+    paths:
+      - cache/*
+
 test-rust-upstream:
   stage: test
   image: "rust:bookworm"