feat(query): add 2D edge-to-facet incidence queries (#478) #1540
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Audit dependencies" | |
| on: | |
| push: | |
| paths: | |
| # Run if workflow changes | |
| - .github/workflows/audit.yml | |
| # Run on changed dependencies | |
| - "**/Cargo.toml" | |
| - "**/Cargo.lock" | |
| pull_request: | |
| paths: | |
| # Run if workflow changes | |
| - .github/workflows/audit.yml | |
| # Run on changed dependencies | |
| - "**/Cargo.toml" | |
| - "**/Cargo.lock" | |
| # Rerun periodically to pick up new advisories (weekly instead of daily) | |
| schedule: | |
| - cron: "0 6 * * 1" # Monday at 6 AM UTC | |
| # Run manually | |
| workflow_dispatch: | |
| # Security: Define minimal required permissions | |
| permissions: | |
| actions: read | |
| contents: read | |
| security-events: write | |
| jobs: | |
| audit: | |
| runs-on: ubuntu-latest | |
| env: | |
| CARGO_AUDIT_VERSION: "0.22.1" | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| - name: Install Rust toolchain | |
| uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6 # v1.16.1 | |
| with: | |
| cache: true | |
| cache-bin: false | |
| # toolchain, components, etc. are specified in rust-toolchain.toml | |
| - name: Cache audit database | |
| uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 | |
| with: | |
| path: ~/.cargo/advisory-db | |
| key: advisory-db-${{ github.ref_name }}-v1 | |
| restore-keys: advisory-db- | |
| - name: Install cargo-audit | |
| uses: taiki-e/cache-cargo-install-action@417450f3c33ee20393705369577571770643d4c7 # v3.0.7 | |
| with: | |
| tool: cargo-audit@${{ env.CARGO_AUDIT_VERSION }} | |
| - name: Run cargo audit | |
| run: | | |
| set +e | |
| cargo audit --format sarif > audit-results.sarif | |
| sarif_status=$? | |
| cargo audit --json > audit-results.json | |
| json_status=$? | |
| # Show human-readable output as well | |
| cargo audit | |
| terminal_status=$? | |
| if [ "$sarif_status" -ne 0 ]; then | |
| exit "$sarif_status" | |
| fi | |
| if [ "$json_status" -ne 0 ]; then | |
| exit "$json_status" | |
| fi | |
| exit "$terminal_status" | |
| continue-on-error: true | |
| - name: Upload audit SARIF results | |
| if: always() | |
| uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 | |
| with: | |
| sarif_file: audit-results.sarif | |
| category: "cargo-audit" | |
| wait-for-processing: true | |
| - name: Upload audit results | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| if: always() | |
| with: | |
| name: audit-results | |
| path: | | |
| audit-results.json | |
| audit-results.sarif |