From: Ezekiel Newren via GitGitGadget Date: Fri, 15 Aug 2025 01:22:48 GMT Subject: [PATCH v2 13/17] github workflows: upload Cargo.lock Message-ID: <44784f0d672f15df238d5232ca098df3d13733ce.1755220973.git.gitgitgadget@gmail.com> In-Reply-To: From: Ezekiel Newren Make each ci workflow upload its Cargo.lock file as a build artifact so that we can audit build dependencies. Signed-off-by: Ezekiel Newren --- .github/workflows/main.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index ef4d6348edcd..ba61bd516639 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -149,6 +149,11 @@ jobs: with: name: windows-artifacts path: artifacts + - name: upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-windows + path: rust/Cargo.lock windows-test: name: win test runs-on: windows-latest @@ -303,6 +308,11 @@ jobs: with: name: windows-meson-artifacts path: build + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-windows-meson + path: rust/Cargo.lock windows-meson-test: name: win+Meson test runs-on: windows-latest @@ -378,6 +388,11 @@ jobs: with: name: failed-tests-${{matrix.vector.jobname}} path: ${{env.FAILED_TEST_ARTIFACTS}} + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-${{matrix.vector.jobname}} + path: rust/Cargo.lock fuzz-smoke-test: name: fuzz smoke test needs: ci-config @@ -484,6 +499,11 @@ jobs: with: name: failed-tests-${{matrix.vector.jobname}} path: ${{env.FAILED_TEST_ARTIFACTS}} + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-${{matrix.vector.jobname}} + path: rust/Cargo.lock static-analysis: needs: ci-config if: needs.ci-config.outputs.enabled == 'yes' -- gitgitgadget