Skip to content

Drop actions-rs/audit-check action and use EmbarkStudios/cargo-deny-action action to check for rust-sec advisories #1823

@john-h-kastner-aws

Description

@john-h-kastner-aws

Describe the improvement you'd like to request

The actions-rs/audit-check action we currently use to check for rust-sec advisories is unmaintained. See rust-lang/infra-team#96.

IIUC, EmbarkStudios/cargo-deny-action, which we current use for validating the licenses of our dependencies, can also check for rustsec advisories. We should be able to drop our use of audit-check and use the cargo-deny-action for both purposes.

Before apply this change we should take a bit of a close look at both actions to be sure cargo-deny-action fully replaces everything we use audit-check for, but otherwise this should be a straightforward migration

Describe alternatives you've considered

No response

Additional context

No response

Is this something that you'd be interested in working on?

  • 👋 I may be able to implement this internal improvement
  • ⚠️ This feature might incur a breaking change

Metadata

Metadata

Assignees

No one assigned

    Labels

    CNCFinternal-improvementRefactoring, minor performance improvement, or other changes that Cedar users may never notice

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions