Measure the build: feature powerset, dependency budget, coverage (#18 §D5/§E2/§E8) - #28
3 findings
Reviewed 0 files; 0 findings. 34 files could not be reviewed: .github/workflows/ci.yml, adapters/tinycortex/src/engine/mod.rs, Cargo.toml, adapters/remote/Cargo.toml, adapters/tinycortex/Cargo.toml, api/Cargo.toml, conformance/Cargo.toml, core/Cargo.toml, crates/tinymemory-module/Cargo.toml, .gitignore, adapters/remote/src/lib.rs, adapters/tinycortex/src/lib.rs, api/src/host/config.rs, conformance/src/lib.rs, conformance/src/reference/mod.rs, conformance/src/suite/mod.rs, core/src/store/namespace_store/events.rs, core/src/store/namespace_store/segments.rs, core/src/tree/score/embed/mod.rs, crates/tinymemory-module/src/lib.rs, crates/tinymemory-module/src/provider.rs, crates/tinymemory-module/src/service/mod.rs, examples/basic.rs, scripts/ci/dependency-budget.sh, src/registry/mod.rs, adapters/remote/src/failure_test.rs, adapters/tinycortex/src/engine/test.rs, api/src/host/test_support.rs, conformance/tests/reference_drivers.rs, src/registry/test.rs, tests/capability_negotiation.rs, tests/driver_selection.rs, tests/null_provider.rs, tests/taint_end_to_end.rs. 1 file was not security-reviewed: README.md (prose or tabular data).
 `dtolnay/rust-toolchain` is pinned to `stable`, which is mutable
[RULE] unpinned-action
A tag or branch can be repointed by whoever owns dtolnay, and the new code runs with this workflow's secrets. Pin to a full commit SHA and let Dependabot bump it.
 `Swatinem/rust-cache` is pinned to `v2`, which is mutable
[RULE] unpinned-action
A tag or branch can be repointed by whoever owns Swatinem, and the new code runs with this workflow's secrets. Pin to a full commit SHA and let Dependabot bump it.
 `taiki-e/install-action` is pinned to `v2`, which is mutable
[RULE] unpinned-action
A tag or branch can be repointed by whoever owns taiki-e, and the new code runs with this workflow's secrets. Pin to a full commit SHA and let Dependabot bump it.