diff --git a/.github/workflows/test-suite.yml b/.github/workflows/test-suite.yml index a7423e9eb6..95a2b8adfc 100644 --- a/.github/workflows/test-suite.yml +++ b/.github/workflows/test-suite.yml @@ -228,6 +228,14 @@ jobs: run: rustup update stable - name: Run cargo audit to identify known security vulnerabilities reported to the RustSec Advisory Database run: make audit + cargo-vendor: + name: cargo-vendor + runs-on: ubuntu-latest + needs: cargo-fmt + steps: + - uses: actions/checkout@v1 + - name: Run cargo vendor to make sure dependencies can be vendored for packaging, reproducibility and archival purpose + run: CARGO_HOME=$(readlink -f $HOME) make vendor cargo-udeps: name: cargo-udeps runs-on: ubuntu-latest diff --git a/Makefile b/Makefile index 072ba0353e..6856635ebd 100644 --- a/Makefile +++ b/Makefile @@ -166,6 +166,10 @@ audit: cargo install --force cargo-audit cargo audit --ignore RUSTSEC-2020-0071 --ignore RUSTSEC-2020-0159 +# Runs `cargo vendor` to make sure dependencies can be vendored for packaging, reproducibility and archival purpose. +vendor: + cargo vendor + # Runs `cargo udeps` to check for unused dependencies udeps: cargo +$(PINNED_NIGHTLY) udeps --tests --all-targets --release