[PATCH v3 05/15] github workflows: upload Cargo.lock
- From
Ezekiel Newren via GitGitGadget <gitgitgadget@gmail.com>
- Date
- Aug 23, 2025, 03:55 UTC
- Message-ID
- <e65488ab993f429174b1f90bc5d810d64347ee6b.1755921357.git.gitgitgadget@gmail.com>
- In-Reply-To
- <pull.1980.v3.git.git.1755921356.gitgitgadget@gmail.com>
From: Ezekiel Newren <ezekielnewren@gmail.com>
Make each ci workflow upload its Cargo.lock file as a build artifact so that we can audit build dependencies.
Signed-off-by: Ezekiel Newren <ezekielnewren@gmail.com> --- .github/workflows/main.yml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+)
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 0f7396621df8..0f8785a676c3 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -156,6 +156,11 @@ jobs: with: name: windows-artifacts path: artifacts + - name: upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-windows + path: rust/Cargo.lock windows-test: name: win test runs-on: windows-latest @@ -317,6 +322,11 @@ jobs: with: name: windows-meson-artifacts path: build + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-windows-meson + path: rust/Cargo.lock windows-meson-test: name: win+Meson test runs-on: windows-latest @@ -399,6 +409,11 @@ jobs: with: name: failed-tests-${{matrix.vector.jobname}} path: ${{env.FAILED_TEST_ARTIFACTS}} + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-${{matrix.vector.jobname}} + path: rust/Cargo.lock fuzz-smoke-test: name: fuzz smoke test needs: ci-config @@ -510,6 +525,11 @@ jobs: with: name: failed-tests-${{matrix.vector.jobname}} path: ${{env.FAILED_TEST_ARTIFACTS}} + - name: Upload Cargo.lock + uses: actions/upload-artifact@v4 + with: + name: cargo-lock-${{matrix.vector.jobname}} + path: rust/Cargo.lock static-analysis: needs: ci-config if: needs.ci-config.outputs.enabled == 'yes'
-- gitgitgadget