From 866783ce130c2775188843a1764c46f2136b5edf Mon Sep 17 00:00:00 2001 From: admin Date: Tue, 30 Jun 2026 01:21:03 -0500 Subject: [PATCH] =?UTF-8?q?fix(ci):=20cargo-deny=20job=20=E2=80=94=20insta?= =?UTF-8?q?ll=20toolchain=20+=20drop=20invalid=20--all-features?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/security.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 16e43fc..ae32f7e 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -71,10 +71,12 @@ jobs: git config --global credential.helper store printf 'https://forkwright:%s@github.com\n' "${FLEET_REPO_TOKEN}" > ~/.git-credentials chmod 0600 ~/.git-credentials + # WHY: setup-rust-toolchain auto-reads rust-toolchain.toml, so nightly-pinned + # repos (theatron) get nightly and stable repos get stable with no input. + - uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6 # v1.16.1 - uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20 with: command: check advisories licenses bans sources - arguments: --all-features credentials: ${{ inputs.has_private_deps && format('https://forkwright:{0}@github.com', secrets.FLEET_REPO_TOKEN) || '' }} use-git-cli: ${{ inputs.has_private_deps }}