Skip to content

Commit 9827bcd

Browse files
committed
feat(cargo-audit): install fresh cargo-audit on test run
In order to prevent future `cargo-audit` failures of reading new new security database disclosures, remove `cargo-audit` from dev container and always try to install `cargo-audit` from source instaed. This makes CI always use new version of the binary while for normal development, local version will be used (so no `--force` flag). Signed-off-by: Egor Lazarchuk <yegorlz@amazon.co.uk>
1 parent f8d253a commit 9827bcd

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

tests/integration_tests/security/test_sec_audit.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,6 @@ def set_of_vulnerabilities(output: CommandReturn):
3535
)
3636

3737
git_ab_test_host_command_if_pr(
38-
"cargo audit --deny warnings -q --json",
38+
"cargo install --locked cargo-audit && cargo audit --deny warnings -q --json",
3939
comparator=set_did_not_grow_comparator(set_of_vulnerabilities),
4040
)

tools/devctr/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,7 @@ RUN curl https://sh.rustup.rs -sSf | sh -s -- -y --profile minimal --default-too
120120
&& rustup target add x86_64-unknown-linux-musl \
121121
&& rustup target add aarch64-unknown-linux-musl \
122122
&& rustup component add llvm-tools-preview clippy rustfmt \
123-
&& cargo install --locked cargo-audit grcov cargo-sort cargo-afl \
123+
&& cargo install --locked grcov cargo-sort cargo-afl \
124124
&& cargo install --locked cargo-deny --version 0.17.0 \
125125
&& cargo install --locked kani-verifier && cargo kani setup \
126126
\

0 commit comments

Comments
 (0)