[PATCH v2 11/18] github workflows: upload Cargo.lock
- From
Ezekiel Newren via GitGitGadget <gitgitgadget@gmail.com>
- Date
- Sep 17, 2025, 01:16 UTC
- Message-ID
- <1e13d6c45fcca68eae493689470c58b6be2e2f81.1758071798.git.gitgitgadget@gmail.com>
- In-Reply-To
- <pull.2043.v2.git.git.1758071798.gitgitgadget@gmail.com>
From: Ezekiel Newren <ezekielnewren@gmail.com>
Make each ci workflow upload its Cargo.lock file as a build artifact so that we can audit build dependencies.
Signed-off-by: Ezekiel Newren <ezekielnewren@gmail.com> --- .github/workflows/main.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+)
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index e986684a2f..ff314d48b7 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -150,6 +150,11 @@ jobs: with: name: windows-artifacts path: artifacts + - name: upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-windows + path: rust/Cargo.lock windows-test: name: win test runs-on: windows-latest @@ -311,6 +316,11 @@ jobs: with: name: windows-meson-artifacts path: build + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-windows-meson + path: rust/Cargo.lock windows-meson-test: name: win+Meson test runs-on: windows-latest @@ -393,6 +403,11 @@ jobs: with: name: failed-tests-${{matrix.vector.jobname}} path: ${{env.FAILED_TEST_ARTIFACTS}} + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-${{matrix.vector.jobname}} + path: rust/Cargo.lock fuzz-smoke-test: name: fuzz smoke test needs: ci-config @@ -503,6 +518,11 @@ jobs: with: name: failed-tests-${{matrix.vector.jobname}} path: ${{env.FAILED_TEST_ARTIFACTS}} + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-${{matrix.vector.jobname}} + path: rust/Cargo.lock static-analysis: needs: ci-config if: needs.ci-config.outputs.enabled == 'yes'
-- gitgitgadget