basilk icon indicating copy to clipboard operation
basilk copied to clipboard

Add a GitHub workflow for automated testing, building, releasing, dependency upgrading, and security auditing

Open yonas opened this issue 1 year ago • 0 comments

A workflow could be triggered on push and PRs could check:

Testing

  • [ ] format linting
  • [ ] cargo build --release doesn't fail
  • [ ] cargo test doesn't fail

Security

  • [ ] dependabot to notify when dependencies are outdated or have security vulnerabilities

Tools

cargo-deny - lint dependencies cargo-outdated - find outdated dependencies cargo-udeps - find unused dependencies cargo-audit - search for security vulnerabilities cargo-pants - search for security vulnerabilities (by sonatype )

Template Repo

https://github.com/yonasBSD/rust-ci-github-actions-workflow

yonas avatar Aug 22 '24 14:08 yonas