diff options
| author | bors[bot] <26634292+bors[bot]@users.noreply.github.com> | 2020-08-12 13:57:14 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-08-12 13:57:14 +0000 |
| commit | 6be5ab02008b442c85c201968b97f24f13c4692e (patch) | |
| tree | c629d3a044b665184d5a1925088633ce2a72f879 | |
| parent | 1e8b2c498a01dc2c92d6008cdc5b611cf3a96b1e (diff) | |
| parent | 5534bc0321f3a1174882b3fbbf2a08eb19a9868d (diff) | |
| download | rust-6be5ab02008b442c85c201968b97f24f13c4692e.tar.gz rust-6be5ab02008b442c85c201968b97f24f13c4692e.zip | |
Merge #5723
5723: Completely remove cargo audit My current feeling is that the build maintenance friction it creates is not proportional to the benefits it provides. We are pretty frugal with the set of Rust dependencies, and our security model is we r=matklad a=matklad bors r+ 🤖 Co-authored-by: Aleksey Kladov <aleksey.kladov@gmail.com>
| -rw-r--r-- | .github/workflows/ci.yaml | 14 |
1 files changed, 0 insertions, 14 deletions
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index f977c88bee7..f46fb8fecc2 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -16,20 +16,6 @@ env: RUSTUP_MAX_RETRIES: 10 jobs: - # rust-audit: - # name: Audit Rust vulnerabilities - # runs-on: ubuntu-latest - # steps: - # - name: Checkout repository - # uses: actions/checkout@v2 - - # - uses: actions-rs/install@v0.1 - # with: - # crate: cargo-audit - # use-tool-cache: true - - # - run: cargo audit - rust: name: Rust runs-on: ${{ matrix.os }} |