Merge pull request #638 from eval-exec/exec/cargo-build-locked

CI: add `--locked` for cargo build

Author: quake

.github/workflows/package.yaml

@@ -95,7 +95,7 @@ jobs:
         run: |
           export GIT_TAG_NAME=` echo ${{ github.ref }} | awk -F '/' '{print $4}' `
           export TOP_DIR=$(pwd)
-          PKG_CONFIG_ALLOW_CROSS=1 CC=gcc CC_aarch64_unknown_linux_gnu=aarch64-linux-gnu-gcc cargo build --target=aarch64-unknown-linux-gnu --release
+          PKG_CONFIG_ALLOW_CROSS=1 CC=gcc CC_aarch64_unknown_linux_gnu=aarch64-linux-gnu-gcc cargo build --locked --target=aarch64-unknown-linux-gnu --release
           gpg --quiet --batch --yes --decrypt --passphrase="$LARGE_SECRET_PASSPHRASE" --output devtools/ci/signer.asc devtools/ci/signer.asc.gpg
           gpg --import devtools/ci/signer.asc
           devtools/ci/package.sh target/aarch64-unknown-linux-gnu/release/ckb-cli

Makefile

@@ -20,7 +20,7 @@ integration:
 	bash devtools/ci/integration.sh v0.200.0
 
 prod: ## Build binary with release profile.
-	cargo build --release
+	cargo build --locked --release
 
 security-audit: ## Use cargo-deny to audit Cargo.lock for crates with security vulnerabilities.
 	cargo deny check --hide-inclusion-graph --show-stats advisories sources -Wunmaintained

devtools/ci/integration.sh

@@ -46,7 +46,7 @@ fi
 cd $CKB_CLI_DIR
 
 # Build keystore_no_password plugin
-cd plugin-protocol && cargo build --example keystore_no_password && cd ..
+cd plugin-protocol && cargo build --locked --example keystore_no_password && cd ..
 
 rm -rf test/target && ln -snf "${CKB_CLI_DIR}/target" test/target
 export RUST_LOG=ckb_cli=info,cli_test=info