basilk
basilk copied to clipboard
Add a GitHub workflow for automated testing, building, releasing, dependency upgrading, and security auditing
A workflow could be triggered on push and PRs could check:
Testing
- [ ] format linting
- [ ]
cargo build --releasedoesn't fail - [ ]
cargo testdoesn't fail
Security
- [ ] dependabot to notify when dependencies are outdated or have security vulnerabilities
Tools
cargo-deny - lint dependencies cargo-outdated - find outdated dependencies cargo-udeps - find unused dependencies cargo-audit - search for security vulnerabilities cargo-pants - search for security vulnerabilities (by sonatype )
Template Repo
https://github.com/yonasBSD/rust-ci-github-actions-workflow