dynein icon indicating copy to clipboard operation
dynein copied to clipboard

Add a daily GitHub workflow to monitor new dependency issues

Open StoneDot opened this issue 10 months ago • 0 comments

Currently, we do not have any GitHub workflow to detect dependency problem. Especially, daily checks is preferable to promptly fix the dependency issue. We should implement the new workflow to follow changes of dependencies and make our code secure for long term.

Strict check is preferable to achieve our high security bar. Thus, we should use cargo audit -D warnings -D unmaintained -D unsound -D yanked to check dependencies.

StoneDot avatar Apr 26 '24 01:04 StoneDot