mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-27 07:03:17 +08:00
alangou
046fd2a024
* ci: pin CI images by digest and add native architecture smoke checks Signed-off-by: Adrien Langou <alangou@nvidia.com> * docs: resolve CI monitoring guidance conflict with main Signed-off-by: Adrien Langou <alangou@nvidia.com> --------- Signed-off-by: Adrien Langou <alangou@nvidia.com>
57 lines
1.6 KiB
YAML
57 lines
1.6 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
name: Cargo Deny (scheduled)
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "23 7 * * *"
|
|
workflow_dispatch:
|
|
workflow_call:
|
|
inputs:
|
|
candidate_ref:
|
|
description: Optional pre-release tag to scan instead of the triggering revision
|
|
default: ""
|
|
type: string
|
|
advisories-only:
|
|
description: Run only the dependency advisory check
|
|
default: false
|
|
type: boolean
|
|
|
|
env:
|
|
CARGO_TERM_COLOR: always
|
|
MISE_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
permissions:
|
|
contents: read
|
|
packages: read
|
|
|
|
concurrency:
|
|
group: cargo-deny-${{ github.workflow }}-${{ inputs.candidate_ref || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
cargo-deny:
|
|
name: Cargo Deny
|
|
runs-on: linux-amd64-cpu8
|
|
container:
|
|
image: ghcr.io/nvidia/openshell/ci:9cb72baa2e61a1b5f12407e6e82da7fdba0aa722@sha256:67a9a0c32cb99825e6d3e9d9eec45d67149ea1ff7c11a1b1e1b3480d2d3df684
|
|
credentials:
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
ref: ${{ inputs.candidate_ref && format('refs/tags/{0}', inputs.candidate_ref) || '' }}
|
|
|
|
- name: Install tools
|
|
run: mise install --locked
|
|
|
|
- name: Check dependencies
|
|
if: ${{ !inputs.advisories-only }}
|
|
run: mise run rust:deny
|
|
|
|
- name: Check dependency advisories
|
|
if: inputs.advisories-only
|
|
run: cargo deny check advisories
|