From: Ian Jackson <ijackson@chiark.greenend.org.uk>
Date: Thu, 15 Jun 2023 17:10:54 +0000 (+0100)
Subject: CI: run cargo audit
X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ian/git?a=commitdiff_plain;h=95f0bdfd01a53555f9b8c09504ed31e593e6a132;p=hippotat.git

CI: run cargo audit

Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
---

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 7238111..8e78cd7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -50,6 +50,21 @@ maint-checks:
     - debian/update-build-deps --check
     - set +e; env git grep -i 'XX[X]'; test $? = 1
 
+# This can start to generate new warnings as new issues are found.
+# And nearly all of the issues are not a crisis.  Often the are
+# irrelevant, or "unmaintained code".  So make this a warning.
+cargo-audit:
+  stage: test
+  allow_failure: true
+  image: "rust:bookworm"
+  script:
+    - ./test/via-cargo-install-in-ci cargo-audit
+    - cargo audit
+  cache:
+    when: 'always'
+    paths:
+      - cache/*
+
 test-rust-upstream:
   stage: test
   image: "rust:bookworm"