chore(ci): add cargo-deny to the CI for supply-chain protection.

This commit is contained in:
David Niehues
2025-01-27 11:53:38 +01:00
parent 3effcb313e
commit 03cc609a1e
2 changed files with 141 additions and 0 deletions

17
.github/workflows/supply-chain.yml vendored Normal file
View File

@@ -0,0 +1,17 @@
name: Supply-Chain
on:
pull_request:
push:
branches: [main]
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
cargo-deny:
name: Deny dependencies with vulnerabilities or incompatible licenses
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: EmbarkStudios/cargo-deny-action@v2