deps: Remediate two CVEs by updating astral-tokio-tar to 0.6.1 #2665
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: api-server-rest basic build and unit tests | |
| on: | |
| push: | |
| branches: | |
| - "main" | |
| paths: | |
| - 'api-server-rest/**' | |
| - '.github/workflows/api-server-rest-basic.yml' | |
| - 'Cargo.toml' | |
| - 'Cargo.lock' | |
| pull_request: | |
| paths: | |
| - 'api-server-rest/**' | |
| - '.github/workflows/api-server-rest-basic.yml' | |
| - 'Cargo.toml' | |
| - 'Cargo.lock' | |
| create: | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| basic_ci: | |
| if: github.event_name != 'push' | |
| name: Check | |
| defaults: | |
| run: | |
| working-directory: ./api-server-rest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| instance: | |
| - ubuntu-24.04 | |
| - ubuntu-24.04-s390x | |
| - ubuntu-24.04-arm | |
| runs-on: ${{ matrix.instance }} | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0 | |
| with: | |
| egress-policy: audit | |
| - name: Code checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| fetch-depth: 1 | |
| - name: Install Rust toolchain | |
| uses: actions-rust-lang/setup-rust-toolchain@2b1f5e9b395427c92ee4e3331786ca3c37afe2d7 # v1.16.0 | |
| with: | |
| components: rustfmt, clippy | |
| - name: Build and install with default features | |
| run: | | |
| mkdir -p ${HOME}/.local/bin | |
| make && make install PREFIX=${HOME}/.local | |
| - name: Musl build with default features | |
| run: | | |
| make LIBC=musl | |
| if: ${{ !endsWith(matrix.instance, 's390x') }} | |
| - name: Run cargo test | |
| run: cargo test -p api-server-rest |