noth/surrealpatch
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add instruction to run cargo vet prune when updating crate audits (#3505)

Browse source
This commit is contained in:
Gerard Guillemas Martos 2024-02-13 12:02:09 +01:00 committed by GitHub
parent 5eacdb0e45
commit 4dcbec0af0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
supply-chain/README.md
View file

@ -65,6 +65,8 @@ The following process can be followed whenever the dependency checking action fa
- `cargo vet trust <PACKAGE>`
- Otherwise, it can be (for now) exempted from the vetting process.
- `cargo vet add-exemption <PACKAGE>`
- Afterwards, prune the list of audits to remove outdated entries.
- `cargo vet prune`
- The changes will be approved by **@surrealdb/security**.
- If the action fails due to `cargo-acl`:
- The newly required access (e.g. `unsafe`, `fs`, `net`...) should be understood by the author of the PR.