_cargo_deny.yml

name: Cargo deny

on:
  workflow_call:
    inputs:
      manifest-path:
        type: string
        required: false
        default: "./Cargo.toml"

concurrency:
  group: cargo-deny-${{ inputs.manifest-path || './Cargo.toml' }}-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/develop' }}

jobs:
  bans-licenses-sources:
    name: cargo deny (bans, licenses, sources)
    runs-on: [self-hosted-x64]
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - run: cargo deny --manifest-path ${{ inputs.manifest-path || './Cargo.toml' }} check bans licenses sources --hide-inclusion-graph

  advisories:
    name: cargo deny (advisories)
    runs-on: [self-hosted-x64]
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - run: cargo deny --manifest-path ${{ inputs.manifest-path || './Cargo.toml' }} check advisories --hide-inclusion-graph